d2cb5e924a05df694143c1b50b1d2fd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2cb5e924a05df694143c1b50b1d2fd3_JaffaCakes118
Size

120KB
MD5

d2cb5e924a05df694143c1b50b1d2fd3
SHA1

e946afcd7cb432255564f1c5bf6780b7a54aa4e2
SHA256

a0e66018df258a915a660db05bb80315523a14bacc8bf1c80d4ea406045acb1a
SHA512

26238fc1bcb8ca7f11567f61b4fece6ff3ae460e6113e13cd42831969f471793527e86eeda2f0c96887a3726ea2313d97ae54a94de33cb56322af7066e04397c
SSDEEP

1536:VBPdLtotOBnmi3APaWkt1RDnmI/9O+QxakakOhSs7N3Zj6S6XQqZrZBuoIAyzvj7:VBXoZitWkt1ln31VkOhl7N1vq9NMjOj6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2cb5e924a05df694143c1b50b1d2fd3_JaffaCakes118

Files

d2cb5e924a05df694143c1b50b1d2fd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38ee2b1a9603029f585d9b279064cde2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
CloseHandle
HeapDestroy
ExitProcess
GetProcAddress

user32

wsprintfA
SetWindowLongA
CloseWindow
CharLowerBuffA

advapi32

RegCreateKeyA
RegSetValueA
RegEnumKeyA
RegQueryValueA

ole32

CoInitialize
CoMarshalInterface
CoCreateInstanceEx

Sections

.text
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE