dacd76a3b5a5ebfc1253706481f2a3ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dacd76a3b5a5ebfc1253706481f2a3ff_JaffaCakes118
Size

393KB
MD5

dacd76a3b5a5ebfc1253706481f2a3ff
SHA1

6e87e61c4deef32dbaf4f5242a459f4b8fda9d68
SHA256

a2b327fa1de34d57ddaaa4fc2dbef109c14ae63793e355212fbd3944e340289e
SHA512

2019b41412d6f963489fb45362fdb01acd5b630516bd3c582987a13e7c87fa84c3e9091a289013fd3913f4e9743ed70d6a85133ddfab6231f642e1531bade741
SSDEEP

6144:FKBKnvq2aXSCousu1Y0GLMe5wLSq12ktwBL2fKZ3kCFkBzn8B9TNA8Bwd4Z7+GGk:7vq2HfusQIyOq1x+BLCxC2BIpN+Go0J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dacd76a3b5a5ebfc1253706481f2a3ff_JaffaCakes118

Files

dacd76a3b5a5ebfc1253706481f2a3ff_JaffaCakes118
.exe windows:3493 windows x86 arch:x86

4ac64d62bc30406d09fdd10cdcc24ac5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
CreateSolidBrush
GetStockObject
CreateFontIndirectW
GetTextExtentPoint32W
GetDeviceCaps
GetStockObject
DeleteDC
CreateFontIndirectW
StretchBlt
GetTextExtentPoint32W

kernel32

ExitProcess
LoadLibraryExW
GetCommandLineA
lstrcmpiW
VirtualAlloc

advapi32

RegCreateKeyExW
RegSetValueExW
InitializeSecurityDescriptor
RegSetValueExA
FreeSid
RegQueryValueExW
OpenThreadToken

user32

MessageBeep
ReleaseDC
InvalidateRect
DispatchMessageA
SetDlgItemTextW
DefWindowProcW
SendMessageW
GetFocus

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 373KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ