14122aab97ec03a28d3cedc053428773_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14122aab97ec03a28d3cedc053428773_JaffaCakes118
Size

14KB
MD5

14122aab97ec03a28d3cedc053428773
SHA1

718adeb280014db8d94c5303078d0e58df3135d6
SHA256

c0ca7eaede8ddf3e1194ac128cc676b58aad91164e7f62be1656d76cc1384d98
SHA512

f383e884e458862c0537e5e3773ef4193d4202d279c438e0641568372c5884d7f8c5d75ea6c696888619a775fc5f2728a281b107d692454eac85ea05eec19f8e
SSDEEP

384:a+8GzCNnntzdSNDbue2jwIitib61w976/OPDYUMG:a+8GzCNnntMNn0jwIisO1w9YOP8UMG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14122aab97ec03a28d3cedc053428773_JaffaCakes118

Files

14122aab97ec03a28d3cedc053428773_JaffaCakes118
.exe windows:4 windows x86 arch:x86

673e85424d16e0c318da5b28c59135fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateMenu
LockWindowUpdate
ModifyMenuA
SendMessageA
DialogBoxParamA

kernel32

GetCurrentProcessId
CloseHandle
_lcreat
_lwrite
LoadLibraryExW
GlobalFindAtomA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

SHGetFolderPathW

gdi32

GetKerningPairsA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ