00f875a792b00741b42f51dd0bd18540_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00f875a792b00741b42f51dd0bd18540_JaffaCakes118
Size

56KB
MD5

00f875a792b00741b42f51dd0bd18540
SHA1

a37fe71a5751fc79ae24a9a099c14dab6a46ee70
SHA256

0ddd9d7e6f190face8f2d44914e6418942ee8098dfab216871b639a7f58c5711
SHA512

69aece99de91e368bb6df8dbc0b116187d2d5b6755325a7f3b15f3b89647a9a13a0cb0828fa152b9cf29eb32e7933799322c0e6867c709bb5551563fe4323577
SSDEEP

1536:F7bRNhAfOjj/9g5LMfMovm4/ZYS1Zt9LZOHVGY1G:VRNeGjjoLEu4xB1ZjLZO1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00f875a792b00741b42f51dd0bd18540_JaffaCakes118

Files

00f875a792b00741b42f51dd0bd18540_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e796fe58b988dfa97463d7fcb201a8ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
VirtualAlloc
CreateFileW
SetUnhandledExceptionFilter
GetCurrentProcess

user32

GetWindowRect
EndDialog

advapi32

GetLengthSid
RegEnumKeyExA

ole32

CoInitializeEx
CLSIDFromProgID

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE