f3ff94cf1192503f4e0e57f9e6fd48ed_JaffaCakes118 | Triage

Sharing

General

Target

f3ff94cf1192503f4e0e57f9e6fd48ed_JaffaCakes118
Size

180KB
MD5

f3ff94cf1192503f4e0e57f9e6fd48ed
SHA1

7dcd385fc651621862a1903be6e75dcda3ccfce5
SHA256

1f1c8dfb60c39dd5bcba9492716ddb12e54945add41d152343138fa0fc4a1551
SHA512

842259699fae7e7cc004e042fb27fa4119b6b592fb4a5a078112784d065bd73a0fd9dd3be4315df0a56b28f5a8977e4af1515d7231784d00e6b483119e36b7dd
SSDEEP

3072:8EbShCZa0OSyHz94UK3SV6Irq77vE/ofldjvpX/rBbiMy:Hb5ZaiyHaUKikIrs7DlddzBbiMy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3ff94cf1192503f4e0e57f9e6fd48ed_JaffaCakes118

Files

f3ff94cf1192503f4e0e57f9e6fd48ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

064fc30afe04a1f2d2c855f92c2d2659

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyExA
RegSetValueExA

kernel32

FlushInstructionCache
FindFirstFileA
UnmapViewOfFile
GetModuleFileNameW
EnumResourceNamesW
SetCalendarInfoW
FindResourceExA
DuplicateHandle
MapViewOfFile
FindClose

rpcrt4

NdrFixedArrayFree
UuidCreate

winmm

timeEndPeriod

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ