128b79dba7715b1a3614d8c6547a900c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

128b79dba7715b1a3614d8c6547a900c_JaffaCakes118
Size

110KB
MD5

128b79dba7715b1a3614d8c6547a900c
SHA1

bd1349d6cb14c05668f12e234e60c9f9d21b3714
SHA256

ddb1bdf53c03965c4f0edd4a8a35db56998416e797860e721561660b1076fcd0
SHA512

61fa58d211a27acd0290a8be9bfa92a7744e7aca4ce4e30c82047b26ea1bc5bf3e896988f38566a528efb8999688e8c1f5897ec5c284e60ca95a04509cc9b6b4
SSDEEP

768:hisLL2ReHY7qCVmByFXoZk02i14lzg+HkvaoKUgPfTeqGqbjX1ay3Iun136nt:hbL2R8upEmmOlzgCkvNcPfT6q/kyDn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
128b79dba7715b1a3614d8c6547a900c_JaffaCakes118

Files

128b79dba7715b1a3614d8c6547a900c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c55c9989c9eb9e5f8782d7857d31ccb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
ExitProcess
lstrlenA

advapi32

RegQueryInfoKeyW
RegEnumValueA

user32

GetMenu
DrawTextW
AppendMenuW
GetWindowTextLengthA
DrawIcon
GetDlgItem

Sections

.mncki
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ognk
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ljlbn
Size: 67KB - Virtual size: 427KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kemh
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mglcc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ