8e017a3818d22c9554558e5d1e15435e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e017a3818d22c9554558e5d1e15435e_JaffaCakes118
Size

101KB
MD5

8e017a3818d22c9554558e5d1e15435e
SHA1

1b423c36eeb46220239480954d761fd5de7af230
SHA256

0d0ebc660383f736e4d67d114d54a5541dcdb5b91f26062f7eaa81e2a03e7c21
SHA512

305d0143818445d03502bcc3e2b13578be24975d6e9d34ffdd481c054ff3095647cacfe5fe72cf4e7ade5cfb66bde2db53ee09a5aa9c9a021a26960fd101ddfd
SSDEEP

3072:oqNJ5h91Cced7qjcF7obhv6OLrAKKFU4UT:hh16Orh5AKKSpT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e017a3818d22c9554558e5d1e15435e_JaffaCakes118

Files

8e017a3818d22c9554558e5d1e15435e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b56cfe5fb5d7ccb85a55027de0d18c46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetWindowsDirectoryA
ReadFile
MultiByteToWideChar
GetModuleFileNameA
DeleteFileA
GetModuleHandleA
IsBadReadPtr
SetFilePointer
GetTickCount
GetCurrentProcess

ole32

CoInitialize
CoUninitialize
OleSetContainedObject
OleCreate

user32

UpdateWindow
CreateWindowExA
DestroyWindow
GetWindowLongA
SetWindowLongA
DefWindowProcA
TranslateMessage
ShowWindow
GetMessageA
PostQuitMessage
MessageBoxA

advapi32

RegCloseKey
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ