cfb0ed1f73f3f11da8b5608a9cd11588_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cfb0ed1f73f3f11da8b5608a9cd11588_JaffaCakes118
Size

50KB
MD5

cfb0ed1f73f3f11da8b5608a9cd11588
SHA1

41ae3702527b76424d2f0e601f7af7716d64f609
SHA256

20eb9803d69fb23ca1f8f14eb39912a185c9d8bca55fbf0bf847a8fe83898ed8
SHA512

effe4c62365a08743ebeed9903d61f771ef19080ae4123ebe9f92c485826a27cbd67d10be591378cf52940c314c297f039091969a8cdaff67a91e9ed6184d4d3
SSDEEP

768:WiZusVVzsBYqxwZ4aiLy7RFpvLXuZr32BBaAriUFE0tFmvDRVCkC5HVYPCr:t8G8w0LyNFxLXKyBhXm0tFmvDMHyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfb0ed1f73f3f11da8b5608a9cd11588_JaffaCakes118

Files

cfb0ed1f73f3f11da8b5608a9cd11588_JaffaCakes118
.exe windows:5 windows x86 arch:x86

81dfae505b5c9b890981ceb760efadd1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EnumChildWindows
EndPaint
EndMenu
EndDialog
DialogBoxParamW
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
CreateDialogParamW
GetWindowTextW
EndDeferWindowPos

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ