71cd23c71bcda6a8a80d82ca29386406_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71cd23c71bcda6a8a80d82ca29386406_JaffaCakes118
Size

178KB
MD5

71cd23c71bcda6a8a80d82ca29386406
SHA1

02266a83c9089a33654b908c87ab9f2f32dd2b09
SHA256

7fc19a9133753edf4a36fc29ea02c1a1e6b2f93dbc7756f79b0375f2adfb0081
SHA512

c6a7ada68668873d83286f76cab6a8a0c091e36dbf0b0ed66f5e34cdc3aafbc5f79c38f70ca63a37a2101602c9b8e7917ed8e9ba5828750cec8125031c774af3
SSDEEP

3072:IMz/lY6udAmGrKPEHKDKr7nI/Pet8yMQ8M5TuI:V/l4vhPCKDKswMQz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71cd23c71bcda6a8a80d82ca29386406_JaffaCakes118

Files

71cd23c71bcda6a8a80d82ca29386406_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a6d596b288cf7df1b3847abf7a8a7e41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
DrawTextA
AlignRects

advapi32

RegEnumKeyW
RegLoadKeyW
RegCreateKeyW
RegEnumKeyExA
RegDeleteValueW
RegOpenKeyExA

kernel32

ExitProcess

Sections

.8b1bb
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.1a23
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bce4
Size: 118KB - Virtual size: 501KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.e9d96
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ