230675b1519e50cf66c5c9e21944307e_JaffaCakes118 | Triage

Sharing

General

Target

230675b1519e50cf66c5c9e21944307e_JaffaCakes118
Size

6.8MB
MD5

230675b1519e50cf66c5c9e21944307e
SHA1

82fcececba12d4005ccf7e895ea56f051e28b0f8
SHA256

828024089be188740b6854560c538e088c6e4f8a244131e4e533de63a06d781e
SHA512

3c187028616a475f119981edbc9eca8c95b484cc7ee978556815673058c4257ba068054c686f4c0911b4bb4ae655128b54c4cf564e59c628b681ed7f8140d71f
SSDEEP

98304:J2XxITUJ/8zEjgRGK5V+58jLz60s88BlIo3bn7B98oV1VpI793eI0MLfxreZRI4m:JNULKbtLTspDIorn7BvVpyL9OHWQTj/o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
230675b1519e50cf66c5c9e21944307e_JaffaCakes118

Files

230675b1519e50cf66c5c9e21944307e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

62a988bccf425d90a61438cbd43503b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetCurrentProcess
HeapAlloc
HeapCreate
GetProcAddress

user32

CreateWindowExA
wsprintfA
CloseWindow
SetWindowLongA

advapi32

RegCreateKeyA
RegSetValueA
RegCloseKey
RegDeleteKeyA

ole32

OleRun
CoUninitialize
CoGetClassObject
CoCreateInstanceEx

Sections

.text
Size: 44KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 67KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE