eec75549bac61796699f5de793e3e582_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eec75549bac61796699f5de793e3e582_JaffaCakes118
Size

109KB
MD5

eec75549bac61796699f5de793e3e582
SHA1

cc1c15436c0ee5a1770f7dd5ac0ae33ae57611a2
SHA256

595b14c712c9e6409a8b3e6e5da32e71ed54d467f373ebbd1f9517a618c548e3
SHA512

1a5370e5ede3fa58d7355bd382128b75a35ce330c85b081cea8f33494c675c2c78cce89888b3f79c6ea31d94adf6a841d9e6b7aa13889041003a8ba37838de39
SSDEEP

1536:1ZnwSPreP/E4N2xguOP6cx9pdR7IzEqZTgCtcYO9rCliDlDFURDoq4OZZZLlCIib:LaP0Zc7pAEutcYyZxWRD68wb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eec75549bac61796699f5de793e3e582_JaffaCakes118

Files

eec75549bac61796699f5de793e3e582_JaffaCakes118
.exe windows:4 windows x86 arch:x86

801c9cb102a6c42c3e378d7c4c850fef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyA
RegSetValueW
RegDeleteValueW
RegDeleteValueA
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyA

comctl32

ImageList_Draw
ImageList_Add

gdi32

CreateBrushIndirect
CreateHalftonePalette
CreatePalette
CreateCompatibleBitmap
GetClipBox
GetDCOrgEx

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 577B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ