768b33ed155e6512317beb0d2aa99d7c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

768b33ed155e6512317beb0d2aa99d7c_JaffaCakes118
Size

100KB
MD5

768b33ed155e6512317beb0d2aa99d7c
SHA1

2fac46ead4ac58872c4a42139aa0f617ef0db867
SHA256

ade724b89a5d2e1279f720addc63008debacbbbd421f80011ed5896316c5b9f0
SHA512

fd86dbd04a94d53dccfa39ea67036dbac50d40cd59b5b1e5690af926b6f2e2d165c4f4249cb6d18330f6086e765f1b0c9d53389b5cfe8e36481294e58ec9be3f
SSDEEP

3072:Cj9cfDCFdd2GTLDi7wsFob/NcuNH5J/FU4C:lGVO7w/1DHKP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
768b33ed155e6512317beb0d2aa99d7c_JaffaCakes118

Files

768b33ed155e6512317beb0d2aa99d7c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59874032832e7c25f27408ec77357e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetModuleHandleA
ReadFile
GetLastError
GetModuleFileNameA
GetWindowsDirectoryA
SetFilePointer
GetTickCount
DeleteFileA
MultiByteToWideChar
GetCurrentProcess

ole32

OleSetContainedObject
OleCreate
CoUninitialize
CoInitialize

user32

DestroyWindow
TranslateMessage
MessageBoxA
DispatchMessageA
CreateWindowExA
GetWindowLongA
DefWindowProcA
SetWindowLongA
GetSystemMetrics
LoadIconA
UpdateWindow
GetMessageA

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ