d2215886acfa0fe1d8cada7e04e44f08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2215886acfa0fe1d8cada7e04e44f08_JaffaCakes118
Size

97KB
MD5

d2215886acfa0fe1d8cada7e04e44f08
SHA1

b56cd94ccf699b890884e98e9791adaf3f34abf9
SHA256

2d777da2e2a223f03c1ab8c2f7371f8c6822babe9814846d978035cdaa799808
SHA512

a88bb33acce910d82e11798b1e6c7325eeed517bcff84608f710db94cdec1a5bac967d7db99e9b94f9de349271e843dc45b79358567245ced46395e0ddf89cd1
SSDEEP

1536:OdQx5qUc84n0OzDjileJxYXZjxRlHNaTYNQ9AxDTvVO8XcsMf80ew/Z4Ro2:+QnqnPvXj8iYXZj/aALvvHXHs80eU4t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2215886acfa0fe1d8cada7e04e44f08_JaffaCakes118

Files

d2215886acfa0fe1d8cada7e04e44f08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e237416d33d79560650b8b393d9d3f48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetModuleHandleA
IsBadReadPtr
CreateProcessA
SetFilePointer

ole32

CoInitialize
OleCreate
OleSetContainedObject

user32

LoadIconA
GetWindowLongA
TranslateMessage
CreateWindowExA
MessageBoxA
GetSystemMetrics
DispatchMessageA
DestroyWindow
PostQuitMessage
UpdateWindow
SetWindowLongA
GetMessageA
DefWindowProcA

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA

shell32

SHGetMalloc

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ