2e77027379a371acd82eb9c99f678ad0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e77027379a371acd82eb9c99f678ad0_JaffaCakes118
Size

100KB
MD5

2e77027379a371acd82eb9c99f678ad0
SHA1

b2f39a147fd6438767bb07017cc7e2caf1ba193a
SHA256

03ca7a32cfb1107966020426a7d2d41674fa3b1cfe25477fcb7d0282e3c3d6f3
SHA512

c567210b9b65092e9e4bcc00cf31c5810ff92b9416fc0ff44986fbf2a31d8177d185927b63c73eaefe25f1d0b95bbf9967e2053a88043655bbfd32704b1aabe4
SSDEEP

3072:pvkhkbgd0Dv2L6A+pjWrwjxV/tqY8UNed+M4NftKU4C:pMkT/puwjbxedoNfP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e77027379a371acd82eb9c99f678ad0_JaffaCakes118

Files

2e77027379a371acd82eb9c99f678ad0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ff028b76b748fa5bbe8cc47ca67f163

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
DeleteFileA
GetCurrentProcess
GetModuleFileNameA
MultiByteToWideChar
GetLastError
ReadFile

ole32

OleCreate
CoUninitialize
CoInitialize

user32

DefWindowProcA
DispatchMessageA
TranslateMessage
CreateWindowExA
MessageBoxA
GetWindowLongA
PostQuitMessage
SetWindowLongA

advapi32

RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ