ac015326c19593c9078c651568ef0bf4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac015326c19593c9078c651568ef0bf4_JaffaCakes118
Size

46KB
MD5

ac015326c19593c9078c651568ef0bf4
SHA1

1176ea2cdb375bac15ea50af7bfc6031cdfe2b06
SHA256

f75e25a3c37ed9d27fd9d82b2d1ac5433fd3e1a86a18a33a03c3e22b9a9f6659
SHA512

4ef9f589b1dcdb3d07e22a8652f9c346e8b6e7cab97dbf1dd32ffd656db66047319f8b6b6903b0b6a59e7f283a28dfb63d94191fd4776748dc4d5c3ef0442a56
SSDEEP

384:j+YJtcO90VO5jJAwAmGR6c2tS/ZInT5L3S14yhYuKesOir/cqdqIJ2MMmdlCkCXE:jNJCgAuhti4PuDccqqIJPCkC5HVYPC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac015326c19593c9078c651568ef0bf4_JaffaCakes118

Files

ac015326c19593c9078c651568ef0bf4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

62ac18960fd7232e1ee90ef410fcda48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EndPaint
EndMenu
EndDialog
EndDeferWindowPos
EnumChildWindows
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
DialogBoxParamW
CreateDialogParamW
EnableWindow

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ