4bf58330cadc61821a4b3c712bd7295e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bf58330cadc61821a4b3c712bd7295e_JaffaCakes118
Size

100KB
MD5

4bf58330cadc61821a4b3c712bd7295e
SHA1

064d366a196a2b2d161ec650b5e6a9f15296cd92
SHA256

c9be1c9fa1593cac2dc1fce81b4feda05d45034174af6b776e1547bc65285169
SHA512

0bbbbcc4548baa60e07d5440721cf98246f70bc0fca912f2190045321eb89a03076c35c483a4545e9546fceb947a247aefbd1768111c7e660ef1f947434714f2
SSDEEP

3072:Cj9cfDCFdd2GTLDi7wsFob/NcuNH5UFU4C:lGVO7w/1DlP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bf58330cadc61821a4b3c712bd7295e_JaffaCakes118

Files

4bf58330cadc61821a4b3c712bd7295e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59874032832e7c25f27408ec77357e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetModuleHandleA
ReadFile
GetLastError
GetModuleFileNameA
GetWindowsDirectoryA
SetFilePointer
GetTickCount
DeleteFileA
MultiByteToWideChar
GetCurrentProcess

ole32

OleSetContainedObject
OleCreate
CoUninitialize
CoInitialize

user32

DestroyWindow
TranslateMessage
MessageBoxA
DispatchMessageA
CreateWindowExA
GetWindowLongA
DefWindowProcA
SetWindowLongA
GetSystemMetrics
LoadIconA
UpdateWindow
GetMessageA

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ