04139cc00cc90de305a085f4c19596bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04139cc00cc90de305a085f4c19596bc_JaffaCakes118
Size

556KB
MD5

04139cc00cc90de305a085f4c19596bc
SHA1

9e56a4a5bf23e6039b9138b2c72ba41d2349bf46
SHA256

5dbbd644f7989fd7b6c9db898ab3cb1230e5485aabf0a1fa9ff13b96e74a7d6e
SHA512

3cd8192c0ab3232f6904c12a535be04efba8c13558edb270c7ad218dfa7abdd1c6e7a468bb9f81fd6cf5a28396b02d586f05674af66570c2d94860992744fab5
SSDEEP

12288:BXNNPGUbR6Byq5eV0/6ANo9zCkAQhB927F/xP6/:BruUbjI6co9zrB9+FJi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04139cc00cc90de305a085f4c19596bc_JaffaCakes118

Files

04139cc00cc90de305a085f4c19596bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

191a40f5df72a8012b544e2292efc786

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
HeapDestroy
LoadLibraryA
GetProcAddress
HeapCreate

user32

SetWindowLongA
wsprintfA
CreateWindowExA
CloseWindow

advapi32

RegOpenKeyA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA

ole32

CoCreateInstance
CoMarshalInterface
CoInitialize

Sections

.text
Size: 468KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE