013672e8f1d0756af92f1a732d07c290_JaffaCakes118 | Triage

Sharing

General

Target

013672e8f1d0756af92f1a732d07c290_JaffaCakes118
Size

78KB
MD5

013672e8f1d0756af92f1a732d07c290
SHA1

614e6468faa21fc283075bc761a758c642d60173
SHA256

4ffce69a556bf95b3726a4a11738f7d456f3c48660a8e04db01bf9156bc0b701
SHA512

cfaf26df941106348a7ea2ee1e6f229794a71cee95a7e98262cf45db323f3cf2bda42755f4266adfd95c1e985439e8fa68a37428446312a3910b8fe5517829c2
SSDEEP

1536:Rem7JIBNyjDB3ljmLP28Rc15NX3tvzNtNBUifVS4WV23+oCNTk:P76ojDxlIPBe5ltNWifV0V23+oj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
013672e8f1d0756af92f1a732d07c290_JaffaCakes118

Files

013672e8f1d0756af92f1a732d07c290_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c50b07fca2bf8a7e3d9093e3253e9cad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFileEx
VirtualAlloc
CreateFileMappingA
GetModuleHandleA
GetCommandLineA
LoadLibraryA
GetProcAddress
CreateFileA

user32

LoadIconA
DialogBoxParamA

advapi32

RegOpenKeyA

comctl32

ord17

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ