f2d8d3ef1d5623bdfa9a0eebd4fc2266_JaffaCakes118 | Triage

Sharing

General

Target

f2d8d3ef1d5623bdfa9a0eebd4fc2266_JaffaCakes118
Size

272KB
MD5

f2d8d3ef1d5623bdfa9a0eebd4fc2266
SHA1

1a86274d2db5433939ed092da2aa9061b81f4d70
SHA256

d8d98aca37ca3d943cc7514a7977c3323eeecceb9e7b12015f2932dba3cd6eab
SHA512

189d3760dd2cc2521423bd3c1d7ce80a9160efbf50239a32dde000b6ee5725735f5e8bae581ab800ddd00211c3e13838b3fb40ae2d4fb5805f7126c55528de4a
SSDEEP

6144:d/H+8pmvtzHm48oilMAOSf0XFdkzR9CnPYlt8:dv+Ym1Y0AOSfaeR0nwf8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2d8d3ef1d5623bdfa9a0eebd4fc2266_JaffaCakes118

Files

f2d8d3ef1d5623bdfa9a0eebd4fc2266_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9ba53bf835231450978b14234475cc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
CreateFileA
LoadLibraryA
ExitProcess
LCMapStringA

user32

CreateWindowExA
CloseWindow
SetWindowLongA
wsprintfA

advapi32

RegEnumKeyA
RegEnumValueA
RegQueryValueA
RegCreateKeyA

ole32

CoRegisterClassObject
CoGetClassObject
CoUninitialize

Sections

.text
Size: 125KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 734KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 74KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE