3b5733c305810a892eb019590ed89f61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b5733c305810a892eb019590ed89f61_JaffaCakes118
Size

108KB
MD5

3b5733c305810a892eb019590ed89f61
SHA1

b9f7be3e6a7b76f50645cca3efbcb5522024b2b9
SHA256

77db3cf4d9d460f2c41baddb403adb0c0a44b53bc36d6db559d72325043df4f0
SHA512

8b10fa095d99e1ba34953e74e68ca08c77b99aec02491c3850f3a1fcfd2c727544913f59630295353e95b0ae34e8eacfe3184723a17e5ba49c3b641da4a7208a
SSDEEP

1536:NfEKvUL4AbPeu1Ih8TeRfcNM833L9WTwDE:NfRS4Abj1Ih8iRab9uN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b5733c305810a892eb019590ed89f61_JaffaCakes118

Files

3b5733c305810a892eb019590ed89f61_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a51f68dc08109e2ae2eff867873b071f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
GetWindowTextLengthA
DrawTextW
InsertMenuA
CopyIcon
GetFocus
BeginPaint
DialogBoxParamW
CopyRect

advapi32

RegDeleteKeyA
RegEnumValueA
RegEnumKeyExW
RegOpenKeyExA
RegEnumValueW
RegCreateKeyW
RegOpenKeyExW
RegDeleteKeyW

kernel32

CopyFileA
ExitProcess
GetCommandLineA

Sections

.baej
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ihofd
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.niej
Size: 66KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bnnf
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ