1b54454b94d1e1c361a6d93e4e1fd2f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b54454b94d1e1c361a6d93e4e1fd2f6_JaffaCakes118
Size

98KB
MD5

1b54454b94d1e1c361a6d93e4e1fd2f6
SHA1

23e7c9a800100ef68d0fc87f85efb61b93ce951c
SHA256

2dac558681716188bc06d81f2e7d464189c81370493d5ac83cd51778d3a0bc9f
SHA512

bda43f662770a5a1fb4fb76f521a01565eedc04cc90e4b7c5cc699af7abfec8ee23e801b503791db80c24a8660c8e2e8ce9945f58072eb5a93e25d511dd17d4e
SSDEEP

1536:Vu7m522z1eAhmySa4aLXztS+jSbh5Ifv6eC980eJJDsXm876UYZe/75cMDXbFCXB:UuNz1eAQFALjtSfcfSH981Km87l2ezW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b54454b94d1e1c361a6d93e4e1fd2f6_JaffaCakes118

Files

1b54454b94d1e1c361a6d93e4e1fd2f6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2d4bf7896c83888b303a433873e3089

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
CreateFileA
HeapDestroy
HeapFree
GetProcAddress

user32

SetWindowLongA
CloseWindow
CreateWindowExA
wsprintfA

advapi32

RegDeleteKeyA
RegEnumValueA
RegCreateKeyA
RegQueryValueA

ole32

OleRun
CoMarshalInterface
CoInitializeEx
CoCreateInstance

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE