014c7a2ac608db09305a8d0114443c75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

014c7a2ac608db09305a8d0114443c75_JaffaCakes118
Size

119KB
MD5

014c7a2ac608db09305a8d0114443c75
SHA1

54a07a4ee2bb7c6564804df082d499d3cc9b24cf
SHA256

ea88702f72871dd3564638984ff43c009ccb572a9296f0d07fce2b1a2ecebee0
SHA512

11cf906c66ff61937b5f2f32cc22cf81efe70000f5dde36aa37a8153e0a1b252a69da3f7ef67dccae73a654aff9d53f37921367b877be49d75e7f7f1715bde7c
SSDEEP

768:zobL5W84YYG9mhQuN8U1TFn4aHE6ZdVrUKlEIdtn7wntVXyyNYeIuV/vHnRCH7l:4I84YYdjBFzVrU2TzMtVXyyNYZEvx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
014c7a2ac608db09305a8d0114443c75_JaffaCakes118

Files

014c7a2ac608db09305a8d0114443c75_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5d524c4917e86f74ce4ee9b49d696926

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

GetCursor
AppendMenuA
DialogBoxParamW
AlignRects
CopyImage
BeginPaint
DrawTextW
GetWindowTextLengthA
LoadCursorA
CopyIcon

advapi32

RegOpenKeyA
RegEnumKeyExA
RegGetKeySecurity
RegQueryValueExW
RegQueryValueExA
RegDeleteValueA
RegDeleteValueW
RegOpenKeyExW

Sections

.mjokd
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.kahb
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.knadk
Size: 74KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.djedh
Size: 1024B - Virtual size: 595B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ