e1341ff060d1ba075662328351bd342c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1341ff060d1ba075662328351bd342c_JaffaCakes118
Size

34KB
MD5

e1341ff060d1ba075662328351bd342c
SHA1

86f12e5f89c721a88b4b9084e3ad728c5830081e
SHA256

1abb0f38ccc1ab087441e40e19def696629ea87cdd4b4ae927d2e6ca1becb9f5
SHA512

6847c1ef93a79679ab1b6bc86bd580a01eae8046aa7bbe506e835e5d5069ae2d5ba844c381aecab861263876ad02edee07b202308704316160d187ec33fc757b
SSDEEP

768:2x1LBKgJQJAVg9J/NRuHRPArMe/54pfmWG8:gBVaRNRv/epem

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1341ff060d1ba075662328351bd342c_JaffaCakes118

Files

e1341ff060d1ba075662328351bd342c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c77264c7a2f58cbaf6969aa7901ff1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

comctl32

ord17

user32

CreateDialogParamW

gdi32

CreateSolidBrush

advapi32

RegCreateKeyExW

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture

Sections

.text
Size: 26KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE