06e6e6e1a483ca1e8117d1b98f1f9240_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06e6e6e1a483ca1e8117d1b98f1f9240_JaffaCakes118
Size

113KB
MD5

06e6e6e1a483ca1e8117d1b98f1f9240
SHA1

668e2f107a6f37df4e50d59967affa4d9df56967
SHA256

c677e481ffaca23549c69c96735e83fce597ba1cc9a806ca30fb4e84783476c2
SHA512

1b3892458e1be36bcba2f46d22cbac95c249e97f47fd6392a04c467b54f599a052887447905d2c41bfb3ce8ec19621e8cfc55777ef8425b1844aabdbb1ecb0ef
SSDEEP

768:1eDkFncHuOwbDGPPQQOdsRRvNcWdjWlgKF/u7wcHdBjz3UXKm:rcH5LAs7mFW80AK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06e6e6e1a483ca1e8117d1b98f1f9240_JaffaCakes118

Files

06e6e6e1a483ca1e8117d1b98f1f9240_JaffaCakes118
.exe windows:5 windows x86 arch:x86

81fe1858661d31385edfae7a84099188

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
CopyImage
GetDlgItem
InsertMenuA
GetWindowTextLengthA
CloseWindow

advapi32

RegEnumKeyExW
RegOpenKeyA
RegCreateKeyA
RegCreateKeyW
RegEnumKeyA
RegEnumKeyExW
RegLoadKeyW

kernel32

GetLastError
ExitProcess
lstrlenA

Sections

.kbfcf
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ppnb
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gmia
Size: 70KB - Virtual size: 397KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jiif
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ