3252148a7cf794fac68ecb284547e397_JaffaCakes118 | Triage

Sharing

General

Target

3252148a7cf794fac68ecb284547e397_JaffaCakes118
Size

104KB
MD5

3252148a7cf794fac68ecb284547e397
SHA1

bcbf3c3ba97657471798c15a92424092153a6616
SHA256

28ced1289ad6e245967768b2f8e79ba49235c0a89f726c807bba83282d106862
SHA512

42a06fb8fa380dc786464bd97a9bd566b783510a36e002b6a6943d7318367ef9e7dbb85850a1bea0442321bcd3d600b35516ef02a5357069ad0e666d985a33ef
SSDEEP

1536:BQvr7V999999b6m99999DM999tenPg+dNma1ZG/DGLL9tEcvOqpSRqjmw2D9+SBb:+vvnPg0ND1ZzFqcSIK4IT/twC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3252148a7cf794fac68ecb284547e397_JaffaCakes118

Files

3252148a7cf794fac68ecb284547e397_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8ff31ce9dfae77c0cf5ffcb552596122

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

o:\Programmieren\Codesoft Releases\_NEW BETATEST\Trojka_Crypter_2.0\Creez Version\release\stub.pdb

Imports

kernel32

CreateFileA
lstrcatA
GetSystemDirectoryA
Module32Next
Module32First
Process32Next
Process32First
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetProcAddress
LoadLibraryA
GetFileSize
LocalAlloc
LocalFree
CreateProcessA
GetCurrentProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
lstrcmpA
ExitProcess
lstrlenA
CreateToolhelp32Snapshot
lstrcpyA
UnhandledExceptionFilter
TerminateProcess
RtlUnwind

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyExA
GetUserNameA
RegQueryValueExA

shlwapi

PathFindFileNameA

Sections

.f0Gx
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ