3d9c35025d09f33312d89e030e42a937_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d9c35025d09f33312d89e030e42a937_JaffaCakes118
Size

111KB
MD5

3d9c35025d09f33312d89e030e42a937
SHA1

fc8db70f7a43638701f939277e82f47489ecd812
SHA256

0a1fc398133842a1d064be2c7bd1cdab5c50dfba0622adebf1c828dbb26cc88c
SHA512

88510be35ce79137f066acdbee226727acae14ca8844bd28317dcdc090b26cae88f3bbca6a4a07c7f5c5ab10896a4f673215d98921525c891544e28184f32879
SSDEEP

1536:mEP+rKy00VgavKDkRTXjBTVNMprSDvN+Pk/M4:m6Q201SwRT9VySJKsM4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d9c35025d09f33312d89e030e42a937_JaffaCakes118

Files

3d9c35025d09f33312d89e030e42a937_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d75fcdcc529f30c940569df637c2f7dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindow
BeginPaint
CopyImage
GetMenu
GetMenu
IsWindow
GetScrollInfo
DrawIcon

kernel32

HeapFree
ExitProcess
GetLastError
ReadFile
DeleteFileW
GetFileTime
GetLocalTime
DeleteFileA
GetStdHandle
DeleteFileW

advapi32

RegQueryValueExA
RegOpenKeyW
RegQueryValueExW
RegDeleteValueA
RegCreateKeyW
RegGetKeySecurity

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 343KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ