1142382b5810964669817d92c3136b5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1142382b5810964669817d92c3136b5c_JaffaCakes118
Size

983KB
MD5

1142382b5810964669817d92c3136b5c
SHA1

e78c9ecc670f65b84bf088f49724117d49502c95
SHA256

b74a2dba27d2ea0ea550ebc6a7327e0d8033baeeecb0bd20a259ea3c5672e9c7
SHA512

5ccfe01f7461683777d84def8373402124bc87e02378d52c769018201881b1430841f2688d3c30f3d65a6d68d3aa5119ee37ffe917c1afc0f81beb6d99a5d2b7
SSDEEP

24576:DBA//D3LZQd98K6FdGtc+OOEC654FxKg1mn6:lA/rFQd1ECag06

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1142382b5810964669817d92c3136b5c_JaffaCakes118

Files

1142382b5810964669817d92c3136b5c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

02c849e6f086e649594cb895778470a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

CreateThread

shell32

ShellExecuteA

advapi32

RegCloseKey

comdlg32

GetOpenFileNameA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 8KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 950KB - Virtual size: 952KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ