85bd2faff3cf7e91506e0bcbaa4e0090_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85bd2faff3cf7e91506e0bcbaa4e0090_JaffaCakes118
Size

100KB
MD5

85bd2faff3cf7e91506e0bcbaa4e0090
SHA1

5653196572fd37a4df8a859e3b0784494c95212d
SHA256

f55059d6447f31a07a8923a80e164ed3836a3a695340cdf02aab343a6f25c9f0
SHA512

5cd2faee8f1601d98a4b45c10a0fc2cac620c8c41be0ff5dff3a8b6e1b2478dbb6e778151f0e2727310461fc97dca6ed54f3cbcbc0f46320e448f1934338bd72
SSDEEP

3072:/3jFolx+Mn4GKmI6l3Kp2ujj7pDorlcU4C:/3jFolceITC5P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85bd2faff3cf7e91506e0bcbaa4e0090_JaffaCakes118

Files

85bd2faff3cf7e91506e0bcbaa4e0090_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5d7481d32e2002fbc6f9b546b8993bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetTickCount
CreateProcessA
GetCurrentProcess
MultiByteToWideChar
IsBadReadPtr
SetFilePointer
DeleteFileA

ole32

OleCreate
CoInitialize
OleSetContainedObject

user32

CreateWindowExA
UpdateWindow
DestroyWindow
DefWindowProcA
DispatchMessageA
MessageBoxA
GetWindowLongA
TranslateMessage
GetSystemMetrics
SetWindowLongA
ShowWindow
PostQuitMessage

advapi32

RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1018B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ