b3035073cafb0450bf0ec95910338705_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3035073cafb0450bf0ec95910338705_JaffaCakes118
Size

111KB
MD5

b3035073cafb0450bf0ec95910338705
SHA1

9d45c708654744b92c697b6fd5a0aa2b0bde83ec
SHA256

ee735326e95bb74e774abb7b3604b2a748eaea5ad7ee43c1b5ce9c7c98604769
SHA512

d94530c6089f8677ad9e5d47f54773328d6f307a21cd11225c473baef987d1d93884623b6bad0aabe1f227b1a3970fa97ba97bf0980e5448785505cc1684e74d
SSDEEP

3072:3CbJ/bZz6Efw6GW1FTji4r9ZaXRD68wb:cJVzc6GW1FTjig9ZahD68w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3035073cafb0450bf0ec95910338705_JaffaCakes118

Files

b3035073cafb0450bf0ec95910338705_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b218a8e78ca59ab541357723ec4d18e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegEnumValueW
RegEnumKeyW
RegEnumKeyA
RegEnumValueA
RegDeleteValueW
RegOpenKeyW
RegDeleteValueA
RegQueryValueW

comctl32

InitCommonControls
ImageList_GetIcon
ImageList_DragEnter
DrawStatusText
DrawStatusTextW
CreateMappedBitmap

gdi32

CreatePalette
CreateDIBitmap
RestoreDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
DeleteDC

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ