35b8a1963509b1aeef5e466c372a35f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35b8a1963509b1aeef5e466c372a35f4_JaffaCakes118
Size

100KB
MD5

35b8a1963509b1aeef5e466c372a35f4
SHA1

302b1222767053eab9c24292da8330fb5d9fe9cc
SHA256

1cf4e24b360adb54948184b75aff735a1e8b7d954d4488639e69c05519f0e67a
SHA512

12b2205adb5e98e812cbdaaa747fcd584e81850cd76ead647d904b5f9871313e0ab71b88d12efaf0cc61ca498039af3ea941f35e5dba4f9ae1e5641d2178a83a
SSDEEP

1536:OdQx5qUc84n0OzDjileJxYXZjxRlHNaTYNQ9AxDTvVO8XcsMf83gew/Z4Ro7:+QnqnPvXj8iYXZj/aALvvHXHs83geU4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35b8a1963509b1aeef5e466c372a35f4_JaffaCakes118

Files

35b8a1963509b1aeef5e466c372a35f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e237416d33d79560650b8b393d9d3f48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetModuleHandleA
IsBadReadPtr
CreateProcessA
SetFilePointer

ole32

CoInitialize
OleCreate
OleSetContainedObject

user32

LoadIconA
GetWindowLongA
TranslateMessage
CreateWindowExA
MessageBoxA
GetSystemMetrics
DispatchMessageA
DestroyWindow
PostQuitMessage
UpdateWindow
SetWindowLongA
GetMessageA
DefWindowProcA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA

shell32

SHGetMalloc

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ