a6632cd43bbd48d4ee88a53d2e0f1f2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6632cd43bbd48d4ee88a53d2e0f1f2a_JaffaCakes118
Size

109KB
MD5

a6632cd43bbd48d4ee88a53d2e0f1f2a
SHA1

339e2155c6fb70fc696b2438dbe87f3ece13332c
SHA256

cd4b906d041710139821eb1cde0760d7352cbb8d5f499808e1b56cca32d507e4
SHA512

76f73a97d57185cdd30f9f63621f8e088c0d25c8b32f1feeda8d7ca6b023641a72d21c8112e1e7c74f1b7b8e726192ecdcc6811a43c0b9f902ac3b264e4f3282
SSDEEP

1536:pbGo6y6dj3hss0fHVnuUi0ToGTkwQ4sYp9AadxBRpx+jZ3kcMj4tN/URDoq4OZZe:pbGq6pRss0Z81wtp9ndhfwZ0hRD68wb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6632cd43bbd48d4ee88a53d2e0f1f2a_JaffaCakes118

Files

a6632cd43bbd48d4ee88a53d2e0f1f2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36439dd9dece48491f74eb5489d055ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyA
RegDeleteValueA
RegQueryValueA
RegCreateKeyW
RegEnumKeyW
RegEnumKeyA

comctl32

InitCommonControls
ImageList_AddIcon
DllGetVersion
ImageList_Add
CreateToolbar

gdi32

CreateBitmap
CreateBrushIndirect
GetDCOrgEx
RestoreDC
CreateCompatibleBitmap

user32

DialogBoxParamA
IsMenu
GetWindowTextLengthA
CopyIcon
GetDC

kernel32

WriteFile
OpenFile
GetCommandLineA
CreateProcessA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 45B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ