7051957968ea86cfb74ced5b7d83e356_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7051957968ea86cfb74ced5b7d83e356_JaffaCakes118
Size

797KB
MD5

7051957968ea86cfb74ced5b7d83e356
SHA1

bed836e762e14499f3df9bd35d63db8a230ece3c
SHA256

173ee615730d5b4f73c10bb6478c53de95dab56e1cbec386ea013d3ae44e3fbc
SHA512

92ec08c1f1e3b959e9174d0b55b030f9d7d4674cf09617ddab19d3cfbfb833ab8ce2cb117c83b8739b9b2b008e7bb3a6fe0a7c8f0ca42e74d47e87722bda5e7d
SSDEEP

12288:hW2GKUBpAqTN+B09XKGOykWFs5HB6rOMrAXZsln6RFzjoS+9AMRuY:NBQpA0FoxJ/0rAXZsF6TAVRR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7051957968ea86cfb74ced5b7d83e356_JaffaCakes118

Files

7051957968ea86cfb74ced5b7d83e356_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38c38e215983cf85312048f6dfe08670

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

OpenClipboard

kernel32

WriteFile
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

shell32

ShellExecuteA

gdi32

AddFontResourceA

comctl32

InitCommonControls

advapi32

RegCreateKeyExA

comdlg32

GetOpenFileNameA

Sections

.text
Size: - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 230KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

by JCVO0
Size: - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

by JCVO1
Size: 566KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE