39c778bd9e8c78a9c7b7fd826c27a9ff_JaffaCakes118 | Triage

Sharing

General

Target

39c778bd9e8c78a9c7b7fd826c27a9ff_JaffaCakes118
Size

32KB
MD5

39c778bd9e8c78a9c7b7fd826c27a9ff
SHA1

990a106e8fc64178bb111c9f8e6febd5486e9310
SHA256

77dbd3636032c3d700eedd21663bb2b8efe7d1ef39df22ab09db226015e0cbc5
SHA512

6aebc8196c404948532289d5e074970e9866eeb61d64d4df0f204c6dbcf0812a6b5c45ea4430c3138f722791ad8fdf3ca4e9cb05c29484ecdc2cca3b39a96f1e
SSDEEP

768:aGHxP2i62xPtmgwTie9VB8VjOIRLgrWt:aGRP2ilv7OVUOM+Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39c778bd9e8c78a9c7b7fd826c27a9ff_JaffaCakes118

Files

39c778bd9e8c78a9c7b7fd826c27a9ff_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e04aa816391587dd4dbc7d0b8e4d4a69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
CloseServiceHandle

user32

GetWindowLongA
LoadCursorA
InflateRect
DispatchMessageW
GetDlgItem
UpdateWindow
TranslateMessage
GetFocus
GetWindowLongW

kernel32

RemoveDirectoryA
LocalFree
DebugBreak
GetDiskFreeSpaceA
GetProcAddress
ExitProcess
VirtualAlloc
GlobalFree
LoadLibraryA
InterlockedIncrement
InterlockedCompareExchange
UnhandledExceptionFilter
LoadLibraryExW
EnterCriticalSection

msvcrt

_purecall
_errno

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ