1813ab217ef692ee6fba2efbf3f402e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1813ab217ef692ee6fba2efbf3f402e8_JaffaCakes118
Size

100KB
MD5

1813ab217ef692ee6fba2efbf3f402e8
SHA1

ff38e826ed6a4525e0c50b1dea104fadd15677ca
SHA256

1fd7ddc5fd665fd5ef57518b5a35f2062634a11c3016f1a41db045c677ffcab4
SHA512

d0bd4f1f4caa0579c3bddb7f2eef9167920aa57ce1d1c2319a1e1aacb60dd278d6d575e3d19e6b01d07e9439219687e321d1e495b157adff4a55fed522ab52c6
SSDEEP

1536:OdQx5qUc84n0OzDjileJxYXZjxRlHNaTYNQ9AxDTvVO8XcsMf8Kew/Z4Ro7:+QnqnPvXj8iYXZj/aALvvHXHs8KeU4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1813ab217ef692ee6fba2efbf3f402e8_JaffaCakes118

Files

1813ab217ef692ee6fba2efbf3f402e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e237416d33d79560650b8b393d9d3f48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetModuleHandleA
IsBadReadPtr
CreateProcessA
SetFilePointer

ole32

CoInitialize
OleCreate
OleSetContainedObject

user32

LoadIconA
GetWindowLongA
TranslateMessage
CreateWindowExA
MessageBoxA
GetSystemMetrics
DispatchMessageA
DestroyWindow
PostQuitMessage
UpdateWindow
SetWindowLongA
GetMessageA
DefWindowProcA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA

shell32

SHGetMalloc

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ