13d4ce13fbfc0c80c60c227541830c5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13d4ce13fbfc0c80c60c227541830c5f_JaffaCakes118
Size

1.7MB
MD5

13d4ce13fbfc0c80c60c227541830c5f
SHA1

f09b504941a51c5d27cdc45a5363bc24e57d3207
SHA256

9378d6b3cfeb110eff90a7efce3eaf61a5b06a709c1570f3219d731c95557c2b
SHA512

4a7032a8680a3dacf2724a3705e70f1f8ec3cc0f9ebb7522d6ab38d0286c0dd96ebecb990a2fa138678ee4401de8d894a47ce5c33994d2099b1888ebc46c4b3e
SSDEEP

49152:U4MixlyrYLNd1xYKEKJyNPIDxgOPYL+K6/v96Xjk:tlyYNPxmybP3oXQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XPProtectorInstaller.exe

Files

13d4ce13fbfc0c80c60c227541830c5f_JaffaCakes118
.rar
XPProtectorInstaller.exe
.exe windows:4 windows x86 arch:x86

ae3ade78e3ac79f62820833169adb2ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
lstrcat
lstrcat
GetNamedPipeHandleStateA

user32

LoadIconA
GetDlgItemTextW
SetClassWord
BeginDeferWindowPos
CreatePopupMenu
CopyIcon
TrackPopupMenu
SetMessageQueue
CharUpperBuffW
SetWinEventHook
CharUpperBuffA
DdeCreateStringHandleW
CheckRadioButton
SetLastErrorEx

Sections

CODE
Size: 9KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 36KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE