3869fa3e0aa9cc9762770184682afac4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3869fa3e0aa9cc9762770184682afac4_JaffaCakes118
Size

174KB
MD5

3869fa3e0aa9cc9762770184682afac4
SHA1

0f4a68f7228846dad090d3af10f2bbb19c1dcabf
SHA256

61a5d97fb7112ef9cb4e1b6116df115971a4a8e8f29f6ae68b5dd01324e5c2c6
SHA512

e00218610cf195666e6bf745ef82039aa3cdc4d58e7aa5af150f68694f75b7e1faee7caf883c265f0dbd6f2ab85d7c7eca7d2d479e64c58f29286407329c531b
SSDEEP

1536:hexfoWQVRoRTBkmTI5r8IpfsiDmVAW0gRBW8IU+s4mPQEPTd9YODBApo:wxfcSR25rBpkiyVAW0gR08DT4WmCApo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3869fa3e0aa9cc9762770184682afac4_JaffaCakes118

Files

3869fa3e0aa9cc9762770184682afac4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

85e3b6c70e2f8a919916d5be4e6b76e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueA
RegLoadKeyA
RegCreateKeyA
RegQueryValueA
RegGetKeySecurity
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyExW
RegQueryInfoKeyA
RegCreateKeyA

kernel32

HeapFree
ExitProcess

user32

GetMenu
DrawTextA
DrawIcon
DrawIconEx
CopyImage
CreateIcon
IsMenu
IsWindow
GetScrollPos
EndDialog

Sections

.phdf
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.hocb
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gponj
Size: 131KB - Virtual size: 430KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gooa
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ppgk
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE