40ea394a9b3668c0cc4e28fd3ecab335_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40ea394a9b3668c0cc4e28fd3ecab335_JaffaCakes118
Size

100KB
MD5

40ea394a9b3668c0cc4e28fd3ecab335
SHA1

753f245becc0244ccebf4771a6602890ff78c1ca
SHA256

f7736ab7a52366819a3243daa9eec0cbd1ae90607edd88a52cc9e7dae2e02ec4
SHA512

0f68b0248b00972f1ad444078a7f4e23cc7d470b9f5f6003862b207372a33d54759e7f158d1a57ab8684ae1b46c8dd1d974333e0618663c1e837dd8706ccd0b3
SSDEEP

1536:OdQx5qUc84n0OzDjileJxYXZjxRlHNaTYNQ9AxDTvVO8XcsMf8vew/Z4Ro7:+QnqnPvXj8iYXZj/aALvvHXHs8veU4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40ea394a9b3668c0cc4e28fd3ecab335_JaffaCakes118

Files

40ea394a9b3668c0cc4e28fd3ecab335_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e237416d33d79560650b8b393d9d3f48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetModuleHandleA
IsBadReadPtr
CreateProcessA
SetFilePointer

ole32

CoInitialize
OleCreate
OleSetContainedObject

user32

LoadIconA
GetWindowLongA
TranslateMessage
CreateWindowExA
MessageBoxA
GetSystemMetrics
DispatchMessageA
DestroyWindow
PostQuitMessage
UpdateWindow
SetWindowLongA
GetMessageA
DefWindowProcA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA

shell32

SHGetMalloc

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ