3c78725dce81ecbbd38fc5916269d5a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c78725dce81ecbbd38fc5916269d5a1_JaffaCakes118
Size

25KB
MD5

3c78725dce81ecbbd38fc5916269d5a1
SHA1

f7a16f8b8986635db7eedcecb15b6c3c5ad33b50
SHA256

599ead520fc40ec4fa5757875579d21c2e2b5ed0107a875d65ca803d4e5c562b
SHA512

fc67a95e8ff68d844f4d811d0953d2a0aa534bd9e8c6b03f1f5dfceeff3442a06bbbb340c83871d542a7e15153e004f1bfa9f66ef20f36293dd74db2e51e3ce2
SSDEEP

384:fS9fToE4bAmmMUZnqQg6ylvKOeCt1oVZtsGGoMk7vvxlL3FjYgzcj:fc7oTAmmMUtqQg6yFKOeIiL7DVjYacj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c78725dce81ecbbd38fc5916269d5a1_JaffaCakes118

Files

3c78725dce81ecbbd38fc5916269d5a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d2ad78181feed418dff29565b30d6450

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

gdi32

SetBkMode

shell32

ShellExecuteA

advapi32

RegEnumKeyA

comctl32

ord17

ole32

CoTaskMemFree

version

VerQueryValueA

Sections

.MPRESS1
Size: 16KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS1
.MPRESS2
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/MANIFEST/1
.xml