b467e71de6576724cea175549ab65897_JaffaCakes118 | Triage

Sharing

General

Target

b467e71de6576724cea175549ab65897_JaffaCakes118
Size

100KB
MD5

b467e71de6576724cea175549ab65897
SHA1

2898a957f2fea287eae6fa0e4caa13f2295b8b70
SHA256

c21acd8eb5528ddca81099034e84a97f698b1cd078d147b8f93e4217dbce5dfa
SHA512

7ca9c9700a07132ef00b7fe3c1eb88a92a63a5d45dbb9159428cf0416b08e7986a6f29a84bc1d378665d334eb573acbb788fbb956c77aa052fc9f1cff9923e8c
SSDEEP

3072:pvkhkbgd0Dv2L6A+pjWrwjxV/tqY8UNed+M4Nft0U4C:pMkT/puwjbxedoNhP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b467e71de6576724cea175549ab65897_JaffaCakes118

Files

b467e71de6576724cea175549ab65897_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4ff028b76b748fa5bbe8cc47ca67f163

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
DeleteFileA
GetCurrentProcess
GetModuleFileNameA
MultiByteToWideChar
GetLastError
ReadFile

ole32

OleCreate
CoUninitialize
CoInitialize

user32

DefWindowProcA
DispatchMessageA
TranslateMessage
CreateWindowExA
MessageBoxA
GetWindowLongA
PostQuitMessage
SetWindowLongA

advapi32

RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 898B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ