e87a2a0ef042e19ab95ccca2e278e6f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e87a2a0ef042e19ab95ccca2e278e6f9_JaffaCakes118
Size

172KB
MD5

e87a2a0ef042e19ab95ccca2e278e6f9
SHA1

83718555e5f2ca73728ce4f5b083ad3536b76e98
SHA256

9d33cee7fcf1367319aaa8f50567a73264dedfc7a0977cb3de78fa556bc3d6c4
SHA512

d858da5c8f681e61ab8a721f124583fc100ec64565a7bb2736b06410b3889a70bfcafa6324ed22cc2931843c0df6a19e6385bd053c92e1d1823d19a562cde2cd
SSDEEP

3072:fa6TlGRJNSKTC8B6kTGXTGv0DImEfgerrluRkrMJLNGM4UC0foE0YFriP:CalcJsKTRUkTGXTLDzEfger7MlrS0gEe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e87a2a0ef042e19ab95ccca2e278e6f9_JaffaCakes118

Files

e87a2a0ef042e19ab95ccca2e278e6f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1014e417d50075b13ec940f61c956112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA

user32

SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegDeleteValueA
RegCloseKey
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyA

Sections

.text
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ