08251053f5ec0f932e1bb8e7f800b362_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08251053f5ec0f932e1bb8e7f800b362_JaffaCakes118
Size

148KB
MD5

08251053f5ec0f932e1bb8e7f800b362
SHA1

2fecfe4fad2bf9796edf18989c6f2ce2aa6045be
SHA256

afde360746116ac6784682b19e91392f7d70aa0c0ccd0a998001dd93880f97f0
SHA512

573c70e7f95622609f7305afa73af32846f643ad6e587342ee45c8360963e4ed3cad4747bddb8f5651cad6648226d4be9a116d3f86a57deb9c38cad58823fbb6
SSDEEP

768:T8ATV/MFMDEEx1PAy4jyn5jAI8dbFbshQRbYFKvcwhnbrEJOwOU/Huz8aE:Tfl6MoEvw+nFARAhmsidhbrEJ/OzO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08251053f5ec0f932e1bb8e7f800b362_JaffaCakes118

Files

08251053f5ec0f932e1bb8e7f800b362_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c98744260deb4d821fa5df16d93c8df4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

advapi32

RegEnumValueA
RegQueryInfoKeyA
RegQueryValueExW
RegGetKeySecurity
RegLoadKeyA

user32

DrawTextW
DialogBoxParamA
GetMenu

Sections

.anhpl
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.kbjj
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hbpap
Size: 76KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aoimp
Size: 512B - Virtual size: 361B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kgpp
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ