df7640c831a79ea605de518a383fcbed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df7640c831a79ea605de518a383fcbed_JaffaCakes118
Size

100KB
MD5

df7640c831a79ea605de518a383fcbed
SHA1

642fc74712a472843352abeba206572bc4484c27
SHA256

1315dfafa54296088df3e712533eaa83aa431eb15289cc987e86221d18d39dfc
SHA512

4f0b1929d5f3f7e7bfac4739897eb611d7214aba3884744b23451270a3210aedcd29ec8264d604d8bbea1d6293e14814f7b96d948e835e4be27e206212064eed
SSDEEP

3072:Cj9cfDCFdd2GTLDi7wsFob/NcuNH5bFU4C:lGVO7w/1DkP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df7640c831a79ea605de518a383fcbed_JaffaCakes118

Files

df7640c831a79ea605de518a383fcbed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

59874032832e7c25f27408ec77357e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetModuleHandleA
ReadFile
GetLastError
GetModuleFileNameA
GetWindowsDirectoryA
SetFilePointer
GetTickCount
DeleteFileA
MultiByteToWideChar
GetCurrentProcess

ole32

OleSetContainedObject
OleCreate
CoUninitialize
CoInitialize

user32

DestroyWindow
TranslateMessage
MessageBoxA
DispatchMessageA
CreateWindowExA
GetWindowLongA
DefWindowProcA
SetWindowLongA
GetSystemMetrics
LoadIconA
UpdateWindow
GetMessageA

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ