68531611df3f70afc4f0c812ef581c7e_JaffaCakes118 | Triage

Sharing

General

Target

68531611df3f70afc4f0c812ef581c7e_JaffaCakes118
Size

211KB
MD5

68531611df3f70afc4f0c812ef581c7e
SHA1

cfe076f867e2f75f1c0a3f99af05034add27ab1d
SHA256

e376d4762df5b3b4b48ad98a52a67263c95b9e7f0a7eea47904b9407c497476c
SHA512

5585f36d4e358868f874cca15a8e09310a1b119132cbdf61dfbbbcb6bd8fe3ee2e650afa886eb1c1f87f20dcd2aabbb9ed1861abc091d070a345cfca246f906c
SSDEEP

6144:qJ9p48or5DMFMUm+3K5XiLu5zqzP1zZznvlYD6ouRgiyXF:t8AmmOK5yq5kTzvTR5y1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HOLZED 1.2.fix/holzed.exe

Files

68531611df3f70afc4f0c812ef581c7e_JaffaCakes118
.rar
HOLZED 1.2.fix/changelog.txt
HOLZED 1.2.fix/friends.ini
HOLZED 1.2.fix/holzed.exe
.exe windows:4 windows x86 arch:x86

beece77ce1457eeaeda3a4c8fd98bd8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

IsDialogMessageA

gdi32

SetMapMode

shell32

ShellExecuteA

comctl32

ord17

shlwapi

PathFindExtensionA

oleacc

CreateStdAccessibleObject

winspool.drv

DocumentPropertiesA

advapi32

RegDeleteKeyA

oleaut32

VariantChangeType

Sections

.text
Size: 192KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HOLZED 1.2.fix/keys.txt
HOLZED 1.2.fix/readme.txt
HOLZED 1.2.fix/settings.ini