b3532d5a213af799efedca5af09334d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3532d5a213af799efedca5af09334d6_JaffaCakes118
Size

100KB
MD5

b3532d5a213af799efedca5af09334d6
SHA1

31a11b24c21f6f3dec68d4eb606dfd67b7feccae
SHA256

702d7957f697fb223145f36f70a2c3e16f9016fee90f8c04acb340809da4047a
SHA512

942c4adb74881e040441f8b99e878e87611f89addbbb7ce45a7cd4696a3f7319c953559aaf34ffdfd787b0e0156501a55c155d19d926395ed02c3f83e4076ed0
SSDEEP

3072:Cj9cfDCFdd2GTLDi7wsFob/NcuNH5fFU4C:lGVO7w/1DEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3532d5a213af799efedca5af09334d6_JaffaCakes118

Files

b3532d5a213af799efedca5af09334d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59874032832e7c25f27408ec77357e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetModuleHandleA
ReadFile
GetLastError
GetModuleFileNameA
GetWindowsDirectoryA
SetFilePointer
GetTickCount
DeleteFileA
MultiByteToWideChar
GetCurrentProcess

ole32

OleSetContainedObject
OleCreate
CoUninitialize
CoInitialize

user32

DestroyWindow
TranslateMessage
MessageBoxA
DispatchMessageA
CreateWindowExA
GetWindowLongA
DefWindowProcA
SetWindowLongA
GetSystemMetrics
LoadIconA
UpdateWindow
GetMessageA

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ