f01198de9a97b4df002a9966a9d2bc9e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f01198de9a97b4df002a9966a9d2bc9e_JaffaCakes118
Size

144KB
MD5

f01198de9a97b4df002a9966a9d2bc9e
SHA1

1fdd371e780373a9e2946b2c7258bf3d0fc5a50f
SHA256

00627c0333b3a86cef710fe61674ff4d22cf11c02a60693a80295fc7f66b21c7
SHA512

c32ab22d2203a19e78a976d6186f6a92210f3db6e9a80e2c36393f26718549c382becc56fcdd8275d881f730e9da5f82278f1f35b242c48efd162fca9d627259
SSDEEP

3072:4wvYcD2rRFM81mZMgbmcsR7Ix0ezk5M2Xvd4MVvkhSG+9i/s4aDoN:0K80OVS9U/fkhyWN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f01198de9a97b4df002a9966a9d2bc9e_JaffaCakes118

Files

f01198de9a97b4df002a9966a9d2bc9e_JaffaCakes118
.exe windows:1 windows x86 arch:x86

37331a4520f48db0f55c67e09aa2b7d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyA

comdlg32

ChooseFontA
GetOpenFileNameA
GetSaveFileNameA

gdi32

SetTextAlign
MoveToEx

comctl32

CreatePropertySheetPageA

version

GetFileVersionInfoSizeA

shell32

SHGetFileInfoA

ole32

CoSetProxyBlanket

msvcrt

_acmdln
_exit
__setusermatherr
_XcptFilter
exit
_initterm
__getmainargs
_findfirsti64
__p__fmode
memcpy
__set_app_type
_controlfp
_adjust_fdiv
__p__commode
_except_handler3

user32

SystemParametersInfoA

kernel32

HeapAlloc
GetStartupInfoA
HeapCreate
VirtualFree
GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ