b6afde5585245fa040a54c7b95966512_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b6afde5585245fa040a54c7b95966512_JaffaCakes118
Size

46KB
MD5

b6afde5585245fa040a54c7b95966512
SHA1

66a3dcc1451af568a461d4a88333216f78cd3115
SHA256

b95027b5e321e4a7604bb5807c43d72b2d51472ab9f12e18846a47f585aa4dcd
SHA512

ed0ee1adde480ea65f09e4019e11aaf1176370d15adcfcbfcd87d544e4ee8d39beb35b433e4641eabce8468d3eda2929f27c62d4d2271d42fbeff5abdafb3056
SSDEEP

768:C714x6ZVtFKhcEELw5p2opzapgKCkC5HVYPC:c182TKhVWaTHyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6afde5585245fa040a54c7b95966512_JaffaCakes118

Files

b6afde5585245fa040a54c7b95966512_JaffaCakes118
.exe windows:5 windows x86 arch:x86

68f267c7e57e4425fcdd7a0663a28d47

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EnableWindow
EnumChildWindows
EndPaint
EndMenu
DialogBoxParamW
EndDeferWindowPos
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
CreateDialogParamW
GetWindowTextW
EndDialog

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ