05e4eee70494bde3a74b4bbc0a6094d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05e4eee70494bde3a74b4bbc0a6094d0_JaffaCakes118
Size

110KB
MD5

05e4eee70494bde3a74b4bbc0a6094d0
SHA1

a5d9765efc6cff049913ea5d6010ec3b26216c6e
SHA256

982c4ece2c25f0986e81268f9532b48aba06725961e979a4917b203454921f06
SHA512

88b593df2c61856b233fc783e4f9c1b9e43aa555c00b737ab7970a1f43b20e32ce733a4dc29b8e73aa84ad693fdf8aeba3b83c4984f05ebc07afd209393db60d
SSDEEP

3072:+hwFyKkaEB0JOEyG+u5jl3TWPBVRD68wb:+S5bcIbnTWPBbD68w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05e4eee70494bde3a74b4bbc0a6094d0_JaffaCakes118

Files

05e4eee70494bde3a74b4bbc0a6094d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f5b8278aecb69d38814370a122983f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueW
RegQueryValueExW
RegDeleteKeyA
RegEnumKeyA
RegEnumValueW
RegCreateKeyExA

comctl32

ImageList_GetIcon
DllGetVersion
ImageList_Create
ImageList_AddIcon
ImageList_Add
CreateToolbar
ImageList_Copy

gdi32

GetBrushOrgEx
CreateFontIndirectA
DeleteObject
SetTextColor
GetPixel
CreatePalette
CreateHalftonePalette

user32

IsMenu
DialogBoxParamA
GetWindowTextA
DialogBoxParamW
CopyIcon

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ