fb67616a2095d9d9a5f79768db30c7bb_JaffaCakes118 | Triage

Sharing

General

Target

fb67616a2095d9d9a5f79768db30c7bb_JaffaCakes118
Size

100KB
MD5

fb67616a2095d9d9a5f79768db30c7bb
SHA1

641d14756ec333f4323ab0bf2bd9aec0bf4e2e5a
SHA256

06aecad15f5b750b69c323b9451d18a0f02b321b9c96a470e1fea3f323b55d77
SHA512

87e9a4ca48c4686227e4d29be9ef3b0fa528c13bb110718ba3fa816d6219ac1186613e183bad116b90bf4e2daf588ce75de45ec60625ad1f761e820c588042b5
SSDEEP

3072:kos0tolsp7PLiB3wTy8p0XAAB3fxl9Eyet8rwU4C:N6Ckpzi8nP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb67616a2095d9d9a5f79768db30c7bb_JaffaCakes118

Files

fb67616a2095d9d9a5f79768db30c7bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f7465e5e0976c06deeef8e74db49cf35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetLastError
GetTickCount
GetModuleFileNameA
DeleteFileA
GetModuleHandleA
ReadFile
IsBadReadPtr

ole32

CoInitialize
OleSetContainedObject
CoUninitialize
OleCreate

user32

GetWindowLongA
UpdateWindow
TranslateMessage
MessageBoxA
GetMessageA
DestroyWindow
DispatchMessageA
LoadIconA
SetWindowLongA
CreateWindowExA
DefWindowProcA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ