cf9147d0f6fb506f5413fc3bcd917832_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf9147d0f6fb506f5413fc3bcd917832_JaffaCakes118
Size

148KB
MD5

cf9147d0f6fb506f5413fc3bcd917832
SHA1

d69673cd6eb4f343b35d86ef4476baf18216a01a
SHA256

5bb5fe242ea58b4d81f8b7827c1b3a3294a6839614e8dd72b035fd12ee5ccb69
SHA512

85819f51bf9694e3de2458cb29b97f2c89fde122235b6871b386f81f9a51c7864b8bb8ea0bebb3f1183b4a3b00397d3c77c038307cfdb287a76bc70132186da3
SSDEEP

3072:OyFuxD/50iGKLuFgRzdmlSA8vNwa65Kw42t4wfwojQb5xsL78QpZxmzrnOgZei:O+gGiXZRzdVvNwEIt4ew5bLsLIQNm/PP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf9147d0f6fb506f5413fc3bcd917832_JaffaCakes118

Files

cf9147d0f6fb506f5413fc3bcd917832_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84c535720243938d37a8f87615dcef21

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetVersionExA
CloseHandle
GetVersion
GetProcAddress
GetModuleHandleA
VirtualAlloc
GetCurrentThread
LoadLibraryA
GetFileType
LocalFree
GetSystemInfo

user32

GetFocus
DispatchMessageA
GetMessageA
TranslateMessage

advapi32

RegOpenKeyW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ