f51601087da2f686c5e1ed23eb2a119e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f51601087da2f686c5e1ed23eb2a119e_JaffaCakes118
Size

50KB
MD5

f51601087da2f686c5e1ed23eb2a119e
SHA1

c67b3c3f9b0cc533f76aa1242fe7df822797e386
SHA256

01239878daad955ea2a2aeb286f3df44adc27142cb7f9bc6589fb18f0bfe16cb
SHA512

69c508a30c742c2a019302457e5e7ed769be2f02d5e3ffef5645760eddea927f20bf25cd699c600d7300992d0996a9e46a26a5b7c2817520521100b74de77ecf
SSDEEP

768:PmSW+d1z8BXAqxwrE9nb+7RFpvLXuZr32BBaAriUFE0tFmvDRJCkC5HVYPCL:OXkEwrCiNFxLXKyBhXm0tFmvDwHyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f51601087da2f686c5e1ed23eb2a119e_JaffaCakes118

Files

f51601087da2f686c5e1ed23eb2a119e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

81dfae505b5c9b890981ceb760efadd1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EnumChildWindows
EndPaint
EndMenu
EndDialog
DialogBoxParamW
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
CreateDialogParamW
GetWindowTextW
EndDeferWindowPos

advapi32

RegOpenKeyA
RegOpenKeyW

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ