412a07642dac09c760a57fdc1e5c61e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

412a07642dac09c760a57fdc1e5c61e0_JaffaCakes118
Size

100KB
MD5

412a07642dac09c760a57fdc1e5c61e0
SHA1

69722ad0d997ddc5e90ae850da52c0b66d6aeeb4
SHA256

52ab529abce8bd56f19878e3f560b96c05646f3ce479b58940e982dea4777011
SHA512

73f34ca46d42fdbe0386f0673a771c70683eb0d0ad6d7442208e29fccaa7d8cddf27edca6062cf1956560055c659298daea7a0297c82e750fbd181803c7f600c
SSDEEP

3072:d9UKEQrc0lT2mutGIZ2v5kk83f0EzWvDU4C:AKFdNvIMvGkAfNzWvoP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
412a07642dac09c760a57fdc1e5c61e0_JaffaCakes118

Files

412a07642dac09c760a57fdc1e5c61e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c223aa45c26fcfff83d3fe2ea117df06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetCurrentProcess
DeleteFileA
GetModuleHandleA
ReadFile
GetWindowsDirectoryA
CreateProcessA
GetModuleFileNameA

ole32

OleSetContainedObject
CoInitialize
CoUninitialize

user32

UpdateWindow
PostQuitMessage
ShowWindow
DefWindowProcA
GetSystemMetrics
MessageBoxA
TranslateMessage
LoadIconA
GetMessageA
CreateWindowExA
DestroyWindow

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA

shell32

SHGetPathFromIDListA
SHGetMalloc

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ