338bca239b2ed3e91f9f53f0460f0c95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

338bca239b2ed3e91f9f53f0460f0c95_JaffaCakes118
Size

112KB
MD5

338bca239b2ed3e91f9f53f0460f0c95
SHA1

6745d64378dcf74a97325e129d516694848aab2d
SHA256

fcef7d1d99d25e1e68b169de0007864f5180e0242bbea1ea9bf17230e0d54ee9
SHA512

a7a02b05f5c95618d63de725f243afe0e8e82030a1b97d46a4f5a4065c18a1fc8b99993de2875d728ba92eef5a3be811898b9b619d9d8370c9b3575ad644c3c7
SSDEEP

1536:/gg4zz7UAuHMHfxDuqCVgZ6f1rjq9jgtdWHqqQ7buIUUCfpL96PMoOMnHDTSURDQ:/h4/A45NlQfNjPsK77aIUUCIzRD68wb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
338bca239b2ed3e91f9f53f0460f0c95_JaffaCakes118

Files

338bca239b2ed3e91f9f53f0460f0c95_JaffaCakes118
.exe windows:4 windows x86 arch:x86

292caf3172e44628c6d76fac52471638

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyW
RegEnumValueA
RegQueryValueExW
RegEnumValueW
RegQueryValueW
RegCreateKeyA
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA

comctl32

ImageList_EndDrag
CreateToolbar
ImageList_DragEnter
ImageList_AddIcon
MenuHelp
CreateStatusWindow
ImageList_Copy
CreateToolbarEx

gdi32

CreateBitmap
GetDCOrgEx
GetPixel
CreateHalftonePalette
GetBitmapBits
CreateBrushIndirect
RestoreDC
CreateDIBSection

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ