83c33290c834b9f48d86ee16b955e3dd_JaffaCakes118 | Triage

Sharing

General

Target

83c33290c834b9f48d86ee16b955e3dd_JaffaCakes118
Size

100KB
MD5

83c33290c834b9f48d86ee16b955e3dd
SHA1

26191612285c8f9b69ac274ee5cdfe7a0d441ec1
SHA256

155334512edaab84b581423c90da90b6c65f62e383b03bfb314ab86867c98ff5
SHA512

288398cf39dc93151d5f03573a7f7e07a9ed308119f04fa83b2bd4a7e5651a60408290714c9a751fe53575377869c60beb2c9edc10b1a61a5721e22be47e0b8c
SSDEEP

1536:OdQx5qUc84n0OzDjileJxYXZjxRlHNaTYNQ9AxDTvVO8XcsMf8/ew/Z4Ro7:+QnqnPvXj8iYXZj/aALvvHXHs8/eU4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83c33290c834b9f48d86ee16b955e3dd_JaffaCakes118

Files

83c33290c834b9f48d86ee16b955e3dd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e237416d33d79560650b8b393d9d3f48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetModuleHandleA
IsBadReadPtr
CreateProcessA
SetFilePointer

ole32

CoInitialize
OleCreate
OleSetContainedObject

user32

LoadIconA
GetWindowLongA
TranslateMessage
CreateWindowExA
MessageBoxA
GetSystemMetrics
DispatchMessageA
DestroyWindow
PostQuitMessage
UpdateWindow
SetWindowLongA
GetMessageA
DefWindowProcA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA

shell32

SHGetMalloc

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ