97618482cf7a0f1443fc795ec23a9b94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97618482cf7a0f1443fc795ec23a9b94_JaffaCakes118
Size

100KB
MD5

97618482cf7a0f1443fc795ec23a9b94
SHA1

2f6b5982267ebf4bde35cc4dc45ca4d3e759bf53
SHA256

92d3503330c3b935149f8164ae5ba9a9c6ee89e401ed6949321b03cdc1321789
SHA512

cad9ff08736cc2a875b90443432f2eb969b4e0b10a65e5c86692aec2f397c3216472ad1b2c90e378b1b90500a3162c5640e7f95ce847fe9e886145f857a06b08
SSDEEP

1536:yipZ9YvmvuEVWsFXRAej9KbVcHbZXxpTWtGlsNwFZI0LTT24fwdhWWxw/Z4Ro7:yi3MeVvFBjKh6NBpTWMxFZNLvQBU4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97618482cf7a0f1443fc795ec23a9b94_JaffaCakes118

Files

97618482cf7a0f1443fc795ec23a9b94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55f397dc13e52c6c736be1516594ab86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
SetFilePointer
DeleteFileA
GetLastError
GetTickCount
GetCurrentProcess
CreateProcessA
GetModuleFileNameA
ReadFile

ole32

CoInitialize
OleCreate
CoUninitialize

user32

DispatchMessageA
CreateWindowExA
TranslateMessage
GetMessageA
GetSystemMetrics
ShowWindow
MessageBoxA
PostQuitMessage
DestroyWindow
SetWindowLongA

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1018B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ