9681e07aba7ebdb8cf87a21c3210c69d_JaffaCakes118 | Triage

Sharing

General

Target

9681e07aba7ebdb8cf87a21c3210c69d_JaffaCakes118
Size

186KB
MD5

9681e07aba7ebdb8cf87a21c3210c69d
SHA1

6dc7693f81ad015c8a7ffa51218a76becaa60f33
SHA256

f732f322e9bef243e1f19c81e26f9e2a101bb93690a46e1192a9274b7cddc091
SHA512

016aee4d0b7811afcdeb63cb65b791361e346233af75f21f1ef284087ef9c42c1cc2dc533e46e55c12e268e97a529068582bbbca550d0423e1a2e4b91491d6b0
SSDEEP

3072:8ADL+Y3QzHJhG7Jdl9wpTikuo7SzNu6mt6CEzDOFPAsYVm8jxI:8YK0pETxrShR06VaoiQI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9681e07aba7ebdb8cf87a21c3210c69d_JaffaCakes118

Files

9681e07aba7ebdb8cf87a21c3210c69d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

942bb3b1926c0cf5823d8700040d109c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AdjustWindowRectEx
SetCursor
GetWindowPlacement
SetRectEmpty
GetClientRect
InvalidateRect
PostMessageW
FillRect

msvfw32

ICClose
ICOpen
ICSendMessage
ICDecompress

kernel32

GetLongPathNameW
GetCurrentThreadId
CloseHandle
SetThreadContext
GetModuleHandleW
GlobalFree
EnumResourceTypesW
LoadLibraryW
ExitProcess
GetCurrentProcessId
UnhandledExceptionFilter
GetProcAddress
GetLastError
CreateFileW
GetVersionExW

advapi32

RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyW
RegDeleteKeyW
RegCloseKey
RegSetValueW

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ