b1832c7e1d3b9e6d7b952862e6193ad5_JaffaCakes118 | Triage

Sharing

General

Target

b1832c7e1d3b9e6d7b952862e6193ad5_JaffaCakes118
Size

46KB
MD5

b1832c7e1d3b9e6d7b952862e6193ad5
SHA1

adea4ef02a4839abaea06a21c5828b1593aa7a5b
SHA256

91c5a1855dec1943db8f78fd83fe01c008185a7626a445b51b51c0f4846c29e3
SHA512

14568d693e627f5e91fb952cea2e9f0f0c1dc3994afcd69d99d8f00ea098be007c9f49f576003c017cca3ceb24f74ef67b3441a7ec85ae25214ae240439881d8
SSDEEP

768:We5t+liJVexWVbyVPsq/TaBuC/BvDSknLCkC5HVYPCL:WK+c9VysqbWuwDSK4HyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1832c7e1d3b9e6d7b952862e6193ad5_JaffaCakes118

Files

b1832c7e1d3b9e6d7b952862e6193ad5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

81dfae505b5c9b890981ceb760efadd1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EnumChildWindows
EndPaint
EndMenu
EndDialog
DialogBoxParamW
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
CreateDialogParamW
GetWindowTextW
EndDeferWindowPos

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ