d64dc1ef02e651aa37e9269df6e11ab7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d64dc1ef02e651aa37e9269df6e11ab7_JaffaCakes118
Size

124KB
MD5

d64dc1ef02e651aa37e9269df6e11ab7
SHA1

6be400990ed2af78fa133d211644039b96d344a7
SHA256

c53d16aadd7170c2dca4f28df46735f24d48c5f03f0fbfdb5322232c55b724d3
SHA512

6d50899d2b125fbd25c2b55a9f8309411d4783f0c78813ae4eb0f30f5cedd6140e945086542f0d859365e38040b819c754f7d7cd59df84ea21af8e247c6cd2dc
SSDEEP

3072:rcWxbHzbsUyhPFzGpVSpSHIQMe6bQZnMAITkOQ27SqVbayEJ7:rcWJNAGpVgHxQGnJQ27FVbayE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d64dc1ef02e651aa37e9269df6e11ab7_JaffaCakes118

Files

d64dc1ef02e651aa37e9269df6e11ab7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2fb1ade46e187b3fb8f3fc3f7fa1f6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadMenuA
GetMenu
GetDC
DialogBoxParamW
DrawTextW
IsMenu
InsertMenuA

kernel32

lstrcpynW
GetStringTypeW
GetStdHandle
GetOEMCP
CreateFileA
GetCPInfo
GetFileType
GetModuleFileNameA
lstrcatA
GetVersion
GetStringTypeA
lstrcpynA
LCMapStringW
GetCurrentProcess
GetStartupInfoA
MultiByteToWideChar
TerminateProcess
SetHandleCount
SetFilePointer
lstrcpyA
GetACP
WriteFile
LCMapStringA
GetCommandLineA

advapi32

RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyA
RegOpenKeyW
RegDeleteValueW
RegOpenKeyExW
RegEnumValueA
RegCreateKeyW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ