3d222ea7f56fc12d4c9c2feac28de7ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d222ea7f56fc12d4c9c2feac28de7ef_JaffaCakes118
Size

118KB
MD5

3d222ea7f56fc12d4c9c2feac28de7ef
SHA1

98867650065fe560c519b5627d7cfaaf21826f59
SHA256

26e0db58d6f4a01111f1840474d427ef992bab4cd848823ecd5180e664c340b8
SHA512

f71e96e86fca2cd678ff5dae9dadb1dd64377ec0672a8803c4663c69f0fb949b335209077fa7ca3ed22bbf4bc4b8a65d3b10dd16ed4c094b03341872129fc189
SSDEEP

3072:zQuz7lceBNL6R+NQjV97YXqwRO2GkXkYX0kWH3KCW:zzlVp6RRjrPwVGjNW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d222ea7f56fc12d4c9c2feac28de7ef_JaffaCakes118

Files

3d222ea7f56fc12d4c9c2feac28de7ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bec9c5e36c91d28f72ad8eabfa1e75d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
SetUnhandledExceptionFilter
QueryPerformanceCounter
FindResourceA
GetModuleHandleA
UnhandledExceptionFilter
GetLastError
InterlockedExchange
CreateDirectoryA
LoadResource
IsBadCodePtr
SizeofResource
GetWindowsDirectoryA
GetCurrentProcess
SetErrorMode

user32

SetWindowPos
LoadCursorA
LoadStringA
CreateWindowExA

advapi32

RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCreateKeyExA
RegDeleteKeyA

ole32

CoUninitialize
CoCreateInstance
CLSIDFromString
StringFromGUID2
CoInitialize
CoTaskMemRealloc

oleaut32

LoadRegTypeLi
LoadTypeLi

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ