3078fd9ff63ed957bff6de378ccfc118_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3078fd9ff63ed957bff6de378ccfc118_JaffaCakes118
Size

171KB
MD5

3078fd9ff63ed957bff6de378ccfc118
SHA1

10c0c3bde73b00ca65bf4afc711c0c2a31f7aa5c
SHA256

d9ea1ac3fde459f1c5739bef32137a63de273f108656bd1e0b0ab736a0d68d0f
SHA512

8572cac2796e82ebfa015195f684626245acc2bd1912346aa8683edd9d463d5b3fd65305f875db3d3b5c55293b3af92d3b359f8567ca3b2e47f37dc8021e253f
SSDEEP

3072:pzMdji9/dhHZqBP/H/0As7hQxWzNPIB0gKHCkCGiZG6:py4ddZqBP/HItzJhp5OZ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3078fd9ff63ed957bff6de378ccfc118_JaffaCakes118

Files

3078fd9ff63ed957bff6de378ccfc118_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cd12fcbb1f127536f5697fb348419e15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyA
RegGetKeySecurity
RegOpenKeyW
RegQueryInfoKeyA
RegCreateKeyExW
RegCreateKeyW
RegDeleteKeyA
RegDeleteKeyW
RegDeleteValueA
RegCreateKeyA

kernel32

ExitProcess

user32

DialogBoxParamW
GetCursor
AppendMenuA
LoadMenuA
GetScrollInfo
IsWindow
CopyRect
EndDialog
DrawTextA
DrawIconEx

Sections

.hbnpb
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fcka
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hjnk
Size: 127KB - Virtual size: 499KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jehi
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lhog
Size: 1024B - Virtual size: 890B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ