c12ef00d56f1378f61a93c4159c92a3f_JaffaCakes118 | Triage

Sharing

General

Target

c12ef00d56f1378f61a93c4159c92a3f_JaffaCakes118
Size

757KB
MD5

c12ef00d56f1378f61a93c4159c92a3f
SHA1

74b90e21fb9ad545131dceca5105996afbca3f6b
SHA256

5988d83e31e2a6c18c7e6a1be4a454a41cdc3e38d4a7ee6bbc05fccd01ab5d22
SHA512

eeb1e886a095171bc153a9aaa8b98cec885910c1ca00f3450edefc554122f89ff0e274b455197d94fb482d1a68ee1809d0b7e2421fe5e443810df757681e1ef8
SSDEEP

12288:4feDaBT6DgDWgEVvP+FiivAo6QqvpyiS+NuZondvvTCqhRgl6TS:DDaBT6D+WhMFFYo6QqMiS+cWvTNRgl6T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c12ef00d56f1378f61a93c4159c92a3f_JaffaCakes118

Files

c12ef00d56f1378f61a93c4159c92a3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8fb21ef4d6b2cb3c1b2912d030646c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadContext
VirtualProtectEx
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

PeekMessageA
SendDlgItemMessageA
GetParent

Exports

Exports

Klpmjymjdom
OpenIjhxbrscdx

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA1
Size: 3KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 680KB - Virtual size: 684KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enill
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ