c03c30d2270a2bc2611afbdef633dc60_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c03c30d2270a2bc2611afbdef633dc60_JaffaCakes118
Size

122KB
MD5

c03c30d2270a2bc2611afbdef633dc60
SHA1

892e17b01b0591bdef9bfabb2d70afeaf52d0987
SHA256

4b7c2218061d6d3069ee6f357dd9c3319f934bb399f655bf3628ed7d8ee1415c
SHA512

2f82c0a87205dbef696d1389c604d7f0a8d2fbbaab198db31921dde7505c04be3fda98969420d7766efa0932160a07b3eefa200ebd8c220f936173fd9bf18155
SSDEEP

3072:B5VXRdmocTTQK9JzM2iTJcOi930cKDpjje5NjUQiP9kGxWdcu:BHmocT0aJzMbTri93upjje5pVGAl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c03c30d2270a2bc2611afbdef633dc60_JaffaCakes118

Files

c03c30d2270a2bc2611afbdef633dc60_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db8ec5f51185b6c42fcbe16b335713ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
CloseHandle
GetProcAddress
HeapAlloc
HeapFree
RtlUnwind

user32

CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA

advapi32

RegSetValueA
RegDeleteValueA
RegEnumKeyA
RegQueryValueA

ole32

CoInitialize
OleRun
CoRegisterClassObject

Sections

.text
Size: 26KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE