23224d718307b5ef5c65d9cc9438c4da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23224d718307b5ef5c65d9cc9438c4da_JaffaCakes118
Size

100KB
MD5

23224d718307b5ef5c65d9cc9438c4da
SHA1

eb0d7adf5bf864ddbe713e9c699b8a847238f4bc
SHA256

7b4f1c1cf762da5e501b810dd4dd3baeff687e0301d0b43ca35e91e9ad086f5b
SHA512

fdb76b549de85ad4ee2fb4699a80b25ec206c0cee6b5fd43c2159e8c3712c68d96ee4adac5f3068f65cc0c0ffb018a95e4bce32421f2a4ab8b4fc90e7783b7de
SSDEEP

3072:meX+y9eCIQMrcwOf3aZEXy0HifOGWUSL7U4C:mi54CsjKXy0CmTLQP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23224d718307b5ef5c65d9cc9438c4da_JaffaCakes118

Files

23224d718307b5ef5c65d9cc9438c4da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6b371078c72a066e43bd55a86835683e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetCurrentProcess
GetWindowsDirectoryA
IsBadReadPtr
SetFilePointer
CreateProcessA
DeleteFileA
GetTickCount
GetModuleHandleA

ole32

OleSetContainedObject
OleCreate
CoUninitialize
CoInitialize

user32

DestroyWindow
SetWindowLongA
CreateWindowExA
DefWindowProcA
PostQuitMessage
UpdateWindow
GetWindowLongA
TranslateMessage
MessageBoxA
ShowWindow
DispatchMessageA

advapi32

RegCloseKey
RegSetValueExA
RegDeleteKeyA

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1006B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ