ba1cfe03d04602533a3b423fecf1884c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba1cfe03d04602533a3b423fecf1884c_JaffaCakes118
Size

42KB
MD5

ba1cfe03d04602533a3b423fecf1884c
SHA1

d62321ca87efec71c6240edfdf09e3f09c33f261
SHA256

49bf4a1f3afbf20a024c420e5348a930b85fd0ae8edd0cd8462205758a7469d1
SHA512

0b1a5c38323412b5965518fea1dac7112bb98bfea506751d6d36ea363b7a5f38326bc5f095bb77d00b33a58ce72c3b67aec45f265dfd849837d02973fe6dbd22
SSDEEP

384:sz77kGcO90VO5jJAwAmGR6c2tS/ZInT5L3S14yhYuKesOiY/cqdqIJ2MMm7CkCXb:szkDgAuhti4PuDxcqqIJfCkC5HVYPC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba1cfe03d04602533a3b423fecf1884c_JaffaCakes118

Files

ba1cfe03d04602533a3b423fecf1884c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

62ac18960fd7232e1ee90ef410fcda48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EndPaint
EndMenu
EndDialog
EndDeferWindowPos
EnumChildWindows
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
DialogBoxParamW
CreateDialogParamW
EnableWindow

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 476B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ