JaffaCakes118_a626fb7a89ab42f2a70643a2374e9818 | Triage

Sharing

General

Target

JaffaCakes118_a626fb7a89ab42f2a70643a2374e9818
Size

187KB
MD5

a626fb7a89ab42f2a70643a2374e9818
SHA1

3c8fbc0e5ff744c620cdaa40e3d4976efd643af2
SHA256

4bfd4f372b542147b9e20f49ff1e48e4ada86ec4670603d190d351891e8633b1
SHA512

948b7d5ebd5ac542cfe166076e1f55acc6a30c72274f206fca8dfb1b7a8b35dd69a078695da6905b264056927ccd17e4e5010366abe6d000831ed0ee1fb18ad3
SSDEEP

3072:/M5tx90DKWXIckX/if/FctEE2y7IumrS078XJ/svOt/LgVdaW:WzoKWXu/ifCiys58xsvmg2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_a626fb7a89ab42f2a70643a2374e9818

Files

JaffaCakes118_a626fb7a89ab42f2a70643a2374e9818
.exe windows:4 windows x86 arch:x86

d054fe7b4521ca2438d095a3f8bba65c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

ICClose
ICSendMessage
ICOpen
ICDecompress

advapi32

RegCreateKeyW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegSetValueW

user32

SetRectEmpty
PostMessageW
SetCursor
GetClientRect
AdjustWindowRectEx
InvalidateRect
GetWindowPlacement
FillRect

kernel32

GetLongPathNameW
GetLastError
GlobalFree
SetThreadContext
CloseHandle
GetModuleHandleW
GetProcAddress
EnumResourceTypesW
ExitProcess
CreateFileW
GetCurrentProcessId
LoadLibraryW
GetCurrentThreadId
UnhandledExceptionFilter
GetVersionExW

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ