144317d767915fb81dab6adf93c59aba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

144317d767915fb81dab6adf93c59aba_JaffaCakes118
Size

45KB
MD5

144317d767915fb81dab6adf93c59aba
SHA1

e8dfbccd9d6ce512b346511f56c5d8309bca80e3
SHA256

e9dcd16ba1836e23a9ca587169183a8dbee83fa5b214d479910e0528c8dda0d5
SHA512

c59a8e735468eb97d99bb9d87eab1dff84dc059c38fc54df7a1997382a3e03e56a58d51b651599ab5b92711844e164319b16035c8d9647f7e84bbf0858125758
SSDEEP

768:HYTlpxNGxZ6Joz3dWQrP4jzlaiFKs6NMyJ9u0lBj9Qs:kTNJJG3dWUPOtstZJ9u0lt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
144317d767915fb81dab6adf93c59aba_JaffaCakes118

Files

144317d767915fb81dab6adf93c59aba_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b2d97fa54f329b44bd731992f7683d84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualFree
UnmapViewOfFile
VirtualAlloc
LoadLibraryA
CreateFileMappingA
GetCommandLineA
GetModuleHandleA
MapViewOfFileEx
CreateFileA

user32

DialogBoxParamA
LoadIconA
LoadCursorA

advapi32

RegOpenKeyA

comctl32

ord17

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ