c8f8c73e3ccac7969addaed8fc702b0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8f8c73e3ccac7969addaed8fc702b0f_JaffaCakes118
Size

100KB
MD5

c8f8c73e3ccac7969addaed8fc702b0f
SHA1

9882d7e09855311c1c62e11909cceb24f19136b1
SHA256

e7830f1a629f9fb97240832892d4285a5abeeef880922ae954ec7863f43bb8e2
SHA512

0b9d36efba631a4ce522ce97fff2f55eb5668d103264eb2cf24c1018c1fd276b8aa48ac8b4272fa9edb69d7a3f25a4bdab08797c94dedc3b8f72a5eb90e1936d
SSDEEP

3072:kTXs32qW/3EJAC1MrViClEv7w3RIz+Pf6eU4C:kje2qmV1W72RIz+PEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8f8c73e3ccac7969addaed8fc702b0f_JaffaCakes118

Files

c8f8c73e3ccac7969addaed8fc702b0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

217190828ad9a5b696102277c496c499

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetCurrentProcess
GetModuleHandleA
DeleteFileA
GetTickCount
ReadFile
CreateProcessA

ole32

CoInitialize

user32

MessageBoxA
DispatchMessageA
GetMessageA
CreateWindowExA
ShowWindow
DestroyWindow
DefWindowProcA
SetWindowLongA
GetWindowLongA
UpdateWindow
PostQuitMessage
GetSystemMetrics

advapi32

RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ