3eadd78883113a1766ed6bc83d8a2821_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3eadd78883113a1766ed6bc83d8a2821_JaffaCakes118
Size

163KB
MD5

3eadd78883113a1766ed6bc83d8a2821
SHA1

13082d4efeec59d706cd91ac03d9368842db65f3
SHA256

d2ef7c274ec83cc3d9f7c4f9f6ac6d2d79023e7e707f4fff89074cde90979c3e
SHA512

576fa0c89864be8ae91c9f87eb5e5b2f221cb0f9b33c9e10b377527d721b91a48b72c85cef4d98ffca92440ebdca1dacd4eddaf9596fe45e9a3a1c96bcfeb7e1
SSDEEP

3072:MRRzbHRsGf07e1Ig5UhU+JvwcsbLmA/Qf9:8JzP0VgWU+Jgm0a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3eadd78883113a1766ed6bc83d8a2821_JaffaCakes118

Files

3eadd78883113a1766ed6bc83d8a2821_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f100a5ea658b8e5236bd9805e94e1523

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
ExitProcess
ReadFile

user32

DrawTextW
DrawIcon
GetWindowTextA
InsertMenuA
GetWindowTextLengthA
DrawTextA
CloseWindow
LoadCursorA
GetCursor

advapi32

RegOpenKeyA
RegCreateKeyW
RegOpenKeyExW
RegGetKeySecurity
RegEnumKeyA
RegCreateKeyA
RegCreateKeyA
RegQueryValueExA
RegCreateKeyExW

Sections

.pmoj
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ljhij
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.klnf
Size: 122KB - Virtual size: 498KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bmfp
Size: 1024B - Virtual size: 633B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bahpb
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ