10d43898b425d4f21652d34524416bf7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10d43898b425d4f21652d34524416bf7_JaffaCakes118
Size

1.3MB
MD5

10d43898b425d4f21652d34524416bf7
SHA1

5ca3e7aa810f4da2aac72962f370cdf753464de2
SHA256

03e276a251e1ff8f627d7da62222d2010351e84167f60b91b0d7ea8dbeb3845b
SHA512

2af0d29e5b5ca51511f5166c96cf0fb6007748d5b2ad8c7a2f6a1f47607ff03eda91ce984bc7fb726cdd662ffbc3c84bb1acafcf9b5e8ffee4c6868b466238f2
SSDEEP

24576:PTYs7wSXO92D53RcX5pW+wsDaQw6DDz3qRyPnmGfrnvVUKueY8RmneWtJk:9lOkFhUpasY6DwOBfrnvV7UeWtO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10d43898b425d4f21652d34524416bf7_JaffaCakes118

Files

10d43898b425d4f21652d34524416bf7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11da5cca76dce3b726c8bc1a82bb88ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

advapi32

RegOpenKeyExA

comctl32

InitCommonControls

shell32

ShellAboutA

mscoree

_CorExeMain

Sections

.bss
Size: - Virtual size: 384KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE