8c62ea1aeddd80016e718e2b85aba0c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c62ea1aeddd80016e718e2b85aba0c0_JaffaCakes118
Size

148KB
MD5

8c62ea1aeddd80016e718e2b85aba0c0
SHA1

d33065fe949cd0ca206c6c9c75cacfe1a11f91e4
SHA256

00593eba53fdd23637e2f882a3c19176fcc236fce94af71044fd8ad5138e2536
SHA512

388741315ecf7b8337730e73051ffb00dd028366551d939b24fd8d73b9c9132db6ff11301fee97c91cd88d9f1df018e11d1238f843293795f7396d5d47786a4d
SSDEEP

768:sUbcOhsHBKiUFf+bHnMwZdxjh+tBdxKKVu1fdYOUDHwBjPRLkSUX6vaR3:LlsHBKLNuXxdQuB1ft0oLk84

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c62ea1aeddd80016e718e2b85aba0c0_JaffaCakes118

Files

8c62ea1aeddd80016e718e2b85aba0c0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

428abf3a4e7372729a6340e83828f6a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
DeleteFileA
FlushFileBuffers
OpenFileMappingA
ReadFile
OpenFile

user32

DrawTextA
GetScrollInfo
AppendMenuA
CreateIcon
GetMenu
DialogBoxParamA
DrawTextA
GetWindowTextLengthA
IsWindow
BeginPaint
GetMenu
GetMenu
AlignRects
BeginPaint
GetScrollPos
IsWindow

advapi32

RegLoadKeyA
RegQueryInfoKeyA
RegOpenKeyW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 105KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ