adcddaf0f02459e2a79c15d81675f578_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adcddaf0f02459e2a79c15d81675f578_JaffaCakes118
Size

262KB
MD5

adcddaf0f02459e2a79c15d81675f578
SHA1

8724373a1d62c063a0907d8551ef9fe64064d383
SHA256

94ae574c52421811e6220d1c5b75c8b702c15aad2356e9cb0fdddd461409385b
SHA512

886c2dc08a531d379bac95840e8c08509cacbfd927bf0b6379e5f6781f110bc41596c7b1e3883f5c7c091773bc48c664fc6b7bb2d2e11145c469066ff70a27ff
SSDEEP

6144:Mp/KBHIWXaqzNnIIpnzApQBJ44H2bliPmMZCEfzflkMSZuBH:MmTbRnIIpnqQz44HQiPmMZRzfGUN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adcddaf0f02459e2a79c15d81675f578_JaffaCakes118

Files

adcddaf0f02459e2a79c15d81675f578_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa60c064b85b13dca8694bcdf07b9fda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetCurrentProcess
LoadLibraryA
HeapDestroy
LCMapStringA

user32

CharLowerBuffA
CreateWindowExA
SetWindowLongA
CloseWindow

advapi32

RegDeleteValueA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA

ole32

CoMarshalInterface
CoRegisterClassObject
OleRun

Sections

.text
Size: 148KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE