JaffaCakes118_e2a16dd1e12e54d02d55c4dad746a583 | Triage

Sharing

General

Target

JaffaCakes118_e2a16dd1e12e54d02d55c4dad746a583
Size

218KB
MD5

e2a16dd1e12e54d02d55c4dad746a583
SHA1

50507d99ddaaa22fab34533132c4c547b892db36
SHA256

6b6db0863ebd9e7b0e2e9c051d0626ce0d1450c308a43bbcdab9ddb1f3f79d02
SHA512

f67b141501adf7dbe041b6f738985e70f29edf17fc0d8a436f53887d7f492aae2d382f5f0be0dc144188b531d86e9a95ecc8be8e233136fdfe67d6e03670bc7d
SSDEEP

3072:SMqClRKweEDyjoecHRdNR5I65QyVwc5q/VZoe0ablwgDfCjQEMnmWILWU9oKX5q4:SMND6ab5Qewc5q/j0w6gDrEMmWICK4eL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e2a16dd1e12e54d02d55c4dad746a583

Files

JaffaCakes118_e2a16dd1e12e54d02d55c4dad746a583
.exe windows:4 windows x86 arch:x86

1fd822c394dd7585e3e5095cbf5dc33a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
ExitProcess
HeapDestroy
CreateFileA
GetProcAddress

user32

CharLowerBuffA
CloseWindow
wsprintfA
CreateWindowExA

advapi32

RegEnumValueA
RegSetValueA
RegEnumKeyA
RegCreateKeyA

ole32

CoCreateInstance
CoInitialize
CoRegisterClassObject
OleRun

Sections

.text
Size: 20KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE