735f676c48938bacc77b46498dc9406b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

735f676c48938bacc77b46498dc9406b_JaffaCakes118
Size

641KB
MD5

735f676c48938bacc77b46498dc9406b
SHA1

2d0ff6d299907400a7051b6c23160deabdc63486
SHA256

81fb498fb439589817dbe6ca38ab310fb54733d41677e80a3e38b959b1181543
SHA512

f9f303e9cd8f42a6fe18ddd9ea59470ebbd6f7d943f865b02348b306ca4d27406f464f7976f7babec4fbc20f4949aa22d82297c6a118bae7709639bfafb1ceab
SSDEEP

12288:AHyXUW4QunMkgmhsIKO3oSeF6H6Jj63m4qSdfE5oY:AHykW4IAhsa2FwDXgoY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
735f676c48938bacc77b46498dc9406b_JaffaCakes118

Files

735f676c48938bacc77b46498dc9406b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

80b8b0f3bc157d0e725d95c3e8bb3485

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
EnumTimeFormatsA
GetTickCount
GetProcAddress
GetThreadLocale
EnumSystemLocalesA
GetStdHandle
EnumSystemCodePagesA
FindResourceA
GetUserDefaultUILanguage

advapi32

CryptImportKey
RegCreateKeyExW
RegQueryValueExA
RegDeleteKeyW
CryptVerifySignatureA
RegQueryInfoKeyW

user32

LoadImageA
RegisterClassA

gdi32

SelectPalette
RealizePalette
CreateDIBitmap

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ