4b8abb4f1ccfd83304e44ca2161fb001_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b8abb4f1ccfd83304e44ca2161fb001_JaffaCakes118
Size

32KB
MD5

4b8abb4f1ccfd83304e44ca2161fb001
SHA1

ef20740c531cc58eb03379400f01781159f671ed
SHA256

3258fd4254e389d745e72993b19819c796e2a5abd42783be3debb2cd35d04af6
SHA512

5aa0d34d2444b319412dba62c6375c854278041b354cc3a88c2a4b42d648cf1094e5fe3104a1762db9d98abba5b14c34d58d306ca4b51a9e8179bb6c37f29ee7
SSDEEP

768:L+WjCiHMajLEG+ShIbs0B/HySXmMmsQ7DpKJ:pCI75PZC1AKJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b8abb4f1ccfd83304e44ca2161fb001_JaffaCakes118

Files

4b8abb4f1ccfd83304e44ca2161fb001_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0671a4c153239563adb016c027063d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

wsprintfA

advapi32

RegOpenKeyA

ole32

CoInitialize

oleaut32

SysAllocString

msvcr71

exit

version

VerQueryValueA

msvcp71

?_Lock@_Mutex@std@@QAEXXZ

dbghelp

StackWalk

Sections

.MPRESS1
Size: 24KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE