42f55c83e5a4eeb6da656259afc3c982_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42f55c83e5a4eeb6da656259afc3c982_JaffaCakes118
Size

100KB
MD5

42f55c83e5a4eeb6da656259afc3c982
SHA1

84d395f8a6e303259bf6a9e34168e6ca5b8936bf
SHA256

9328aa8912fb13526bf1800fcad4a4b8b22a1a8bbf8ca2fb684605ce25af53c6
SHA512

ff8fa829be2c0514568ce669f9af9a40d4ff816a217aa4038254af855335785fc1bb9e18212e014d5c2d8b02a99775448be50e4d78efd9c09bf0eb6fe7f47b71
SSDEEP

1536:kEJ8Blpm3tXmoZBc7d9vmhplDzg0YFYK8ceHCnNmxJltXjtw/Z4Ro7:ejY3tXmoZGd9OxXy8cGumxJPXxU4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42f55c83e5a4eeb6da656259afc3c982_JaffaCakes118

Files

42f55c83e5a4eeb6da656259afc3c982_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac1956bcdda8414ae3b5d5fd0c44b0f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
IsBadReadPtr
GetCurrentProcess
DeleteFileA
GetWindowsDirectoryA
GetModuleHandleA
MultiByteToWideChar

ole32

CoUninitialize
OleSetContainedObject

user32

MessageBoxA
DefWindowProcA
CreateWindowExA
DestroyWindow
GetSystemMetrics
PostQuitMessage
LoadIconA
GetMessageA
UpdateWindow
TranslateMessage

advapi32

RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ