51fe5f3561314e3af52c07ea972a1035_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51fe5f3561314e3af52c07ea972a1035_JaffaCakes118
Size

175KB
MD5

51fe5f3561314e3af52c07ea972a1035
SHA1

d77df66ad3948fd3417145e3d831740590df1607
SHA256

f6db2a0db6210dc379b356bee0f34fd855a57a19ccdf65ddf527f43585e5ded8
SHA512

ee28e9c3c4c8b886a78877846dd236f2ddec0239319174f882b359a6c30b389cfd0f03ecd5ab86ee5f3445d145fabc71be7d4ba68019582cc2fd869892b8efed
SSDEEP

3072:TWrXqHXP/IyXOlaCn7sLJQgf6hJaIKuIwoQkl6:TCqDXOl7MzihdMwBn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51fe5f3561314e3af52c07ea972a1035_JaffaCakes118

Files

51fe5f3561314e3af52c07ea972a1035_JaffaCakes118
.exe windows:5 windows x86 arch:x86

52acfbbaba644ab85add0198c2a289cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetStdHandle
ExitProcess

advapi32

RegEnumValueA
RegCreateKeyA
RegLoadKeyA
RegCreateKeyExA
RegOpenKeyW
RegGetKeySecurity
RegEnumKeyExW

user32

GetDlgItem
EndDialog
AppendMenuA

Sections

.oigda
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.cnbkj
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dcac
Size: 126KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.emaoa
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.chlg
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ