9762c90d4e0e65c0bc6120751d5fb5cf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9762c90d4e0e65c0bc6120751d5fb5cf_JaffaCakes118
Size

90KB
MD5

9762c90d4e0e65c0bc6120751d5fb5cf
SHA1

8528cac323fba9ec5843685fd0eca03be0fea00f
SHA256

098c9f5f7efca98e635ca3b162ef3deb6890f187f23eac53c912e967ae393bfd
SHA512

9e73649d8ca9491e707c946e51a06f2206247a97094b3701690194d9143d9c665d816156c07f1d5efa3dcde700c119b1affaa8cd3c4ce06ef61d0c7329c86a37
SSDEEP

1536:ILNmoVF/HcyEio1vZv7781cyZxubXaIDe8stIDmEznTkAqseaQBiV7BvVK8yxdwV:ILNzVF/HcyEn778SyrubKryZDTkee2V1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9762c90d4e0e65c0bc6120751d5fb5cf_JaffaCakes118

Files

9762c90d4e0e65c0bc6120751d5fb5cf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d08088bb79f809895727a760be217370

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
GetModuleHandleA
SetFilePointer
InterlockedIncrement
CreateProcessA
DeleteFileA
IsBadReadPtr
CloseHandle
CreateFileA
WriteFile
CreateMutexA
GetCurrentProcess
GetWindowsDirectoryA
ExitProcess

ole32

CoInitialize
OleCreate
CoTaskMemAlloc
CoUninitialize

user32

GetWindowLongA
PostQuitMessage
MessageBoxA
GetMessageA
DestroyWindow
DispatchMessageA
LoadIconA
ShowWindow
UpdateWindow
DefWindowProcA
CreateWindowExA
SetWindowLongA

oleaut32

SysFreeString
SysAllocString

advapi32

RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA

shell32

SHGetMalloc

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ