0b217d1a6df69ca42b23b609f0fcbc4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b217d1a6df69ca42b23b609f0fcbc4d_JaffaCakes118
Size

150KB
MD5

0b217d1a6df69ca42b23b609f0fcbc4d
SHA1

603c314421fe1e65d96339e3c8c55f99b047731e
SHA256

aeb74bdc80641fc88c856b930d7edba284146c5ffd62fa25da917baffc9c5621
SHA512

63e870cf129f896c0ef9b9d9fdcc4bba370779d412648e164ade76d1bd904efd935fcabf37db40dab114edffd59b8eaf96842e5b8b0916a6fcd6b26df152c8c3
SSDEEP

3072:zdafknoyRF910IOvPZHXGNmCp8nR8OPsH4N8:pafEoyB1GvxHXyv8RDUH4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b217d1a6df69ca42b23b609f0fcbc4d_JaffaCakes118

Files

0b217d1a6df69ca42b23b609f0fcbc4d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

90afcf8d5bda2929d52b55c022e61c80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DrawTextW
DialogBoxParamA
GetDC
CloseWindow
InsertMenuA
CopyRect

advapi32

RegEnumKeyW
RegOpenKeyExA
RegCreateKeyA
RegQueryValueExW

kernel32

FormatMessageA
GetCPInfo
WriteFile
GetFileType
FreeResource
DeleteFileA
CopyFileA
CreateDirectoryA
DeleteFileW
ExitThread
GetLastError
FlushFileBuffers
GetFileTime
GlobalFree
OpenFile
HeapAlloc
GetCommandLineA
GetLocalTime
HeapFree
FindClose
ExitProcess
CopyFileExA
GetPriorityClass

Sections

.g6fh
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.1fdf
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e007
Size: 113KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g15b
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ