966fa7d255c93647eef908e2035adf37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

966fa7d255c93647eef908e2035adf37_JaffaCakes118
Size

46KB
MD5

966fa7d255c93647eef908e2035adf37
SHA1

e6ff0c3ae2bb396c0b83f28673c471dbb2ce3aa8
SHA256

55da37612cef7ddd945b187dad2a013e6df00e3b94e7a8b70a0c831d4129bf4c
SHA512

b034dc2d31ee5c791f21828f9738b692e86122017bccdd51c980fc0d60b1055c46af2104ba2e4d08b87b58c0e3b005aadc5ad4b89892c14e19c2fbcb3e391f91
SSDEEP

768:f/9pQzKWMjCxJQR+tefUlLj7D+DD988/OeJUKsBQ+5wtM:tygAJQEppiROeud

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
966fa7d255c93647eef908e2035adf37_JaffaCakes118

Files

966fa7d255c93647eef908e2035adf37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18f34e7163f01566c22145e742a7a0d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

gdi32

SetBkMode

shell32

ShellExecuteW

advapi32

RegEnumKeyW

comctl32

ord17

ole32

CoTaskMemFree

version

VerQueryValueW

Sections

.MPRESS1
Size: 18KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS1
.MPRESS2
.rsrc/GROUP_ICON/103
.rsrc/ICON/1.ico
.rsrc/ICON/2.ico
.rsrc/ICON/3.ico
.rsrc/ICON/4.ico
.rsrc/ICON/5.ico
.rsrc/ICON/6.ico
.rsrc/MANIFEST/1
.xml