2787d0f424384e4198bcdbcc34a7b601_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2787d0f424384e4198bcdbcc34a7b601_JaffaCakes118
Size

68KB
MD5

2787d0f424384e4198bcdbcc34a7b601
SHA1

359cb34fb134c979737e3d16cc766a288ee16cbc
SHA256

aa5f83d7ed99257a363f7545c7cdbd854f5556ed6009a56ed8eb6f85a501e9af
SHA512

7855a657bb71eada85358061e4ba880ce115b214201b4e51e31558e221391809c5716037637d24acab4db843afa2f4ae73e973c16d0283c7555f2e135d7b60d6
SSDEEP

1536:t46unxappyCMPrylfBKHl6iMc7lkJeNaVxbqiQl8GVT3l+wAzo:t46unwp4PruBKHoiIEaqiQl8GV5+jo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2787d0f424384e4198bcdbcc34a7b601_JaffaCakes118

Files

2787d0f424384e4198bcdbcc34a7b601_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96d17de236763db96f6bee6c9cf74754

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryInfoKeyA
CryptReleaseContext
RegCreateKeyExW
RegEnumValueW
RegDeleteKeyA
CryptDestroyKey
RegDeleteKeyW
RegEnumKeyExW
CryptImportKey
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExA
CryptVerifySignatureA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExW

kernel32

CreateFileMappingW
GetProcAddress
GetTickCount
VirtualAlloc
GetStdHandle
LoadLibraryA
GetACP
GetCurrentProcess
EnumSystemCodePagesA
GetVersion
GetModuleHandleA
GetSystemTime

user32

CreateWindowExA
SetForegroundWindow
RegisterClassA
GetDesktopWindow
EnumDisplayMonitors

gdi32

CreatePalette
SelectPalette
DeleteObject
SetBkMode

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ