b4277608895b3d1209318b95d4db683e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4277608895b3d1209318b95d4db683e_JaffaCakes118
Size

59KB
MD5

b4277608895b3d1209318b95d4db683e
SHA1

a69d0c3e9141f1e05be8f26528f852c4052b8238
SHA256

46b7dfb46220c134836272c6279555d7ea592cba9e05590ced9c7782ec35763f
SHA512

f70001491774eb344655c66d2dd47d02998bf6b0a02cd73135e1187a7da35578d35c3752b40c27f70e59ea76976d4e98c7b05ef85f38cc4c1e7b75c414908885
SSDEEP

1536:kylR4K4nkZXO0FRomrsCs5/AACMTN86vONtn18R:nL4KlzFxA4OyZ3S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4277608895b3d1209318b95d4db683e_JaffaCakes118

Files

b4277608895b3d1209318b95d4db683e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e087c1b3dae2290503516d80421c6a9b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetMenuInfo
IsCharLowerA
DestroyCaret
CreateIcon
CreateDesktopW
ChangeMenuA

kernel32

SetStdHandle
lstrcatW
IsValidLocale
GetDateFormatA
GetConsoleCP
ExitProcess

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegEnumValueA

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ