b0b3e061f1b9958210352f61bcca8b9c_JaffaCakes118 | Triage

Sharing

General

Target

b0b3e061f1b9958210352f61bcca8b9c_JaffaCakes118
Size

50KB
MD5

b0b3e061f1b9958210352f61bcca8b9c
SHA1

ebab33681a221103e118bbfcb4fd37151e12fa0d
SHA256

ed5c7f5d23669a7f55899a046636339ee9f6df4d77070efae97f5468035f1662
SHA512

f98b4f00f5d6f691638b7e0c29f7289aaa3a24306e196b80ebd53d2ac9d3cbe38ddc0de286631fb6126b65a5fc8d806ac4e57b6e577136ce1c910baa9573c43c
SSDEEP

768:/p3usVVzsBYqxwZCViLy7RFpvLXuZr32BBaAriUFE0tFmvDRRCkC5HVYPCEJ:BeG8wbLyNFxLXKyBhXm0tFmvD4HyP5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0b3e061f1b9958210352f61bcca8b9c_JaffaCakes118

Files

b0b3e061f1b9958210352f61bcca8b9c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

81dfae505b5c9b890981ceb760efadd1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EnumChildWindows
EndPaint
EndMenu
EndDialog
DialogBoxParamW
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
CreateDialogParamW
GetWindowTextW
EndDeferWindowPos

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ