ec67dbb737cbb6842ccc94ab78af8454_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec67dbb737cbb6842ccc94ab78af8454_JaffaCakes118
Size

180KB
MD5

ec67dbb737cbb6842ccc94ab78af8454
SHA1

bb3f30cbcbd3a1d0a572f4a159c23df8d05079d9
SHA256

2a8567ee23f2664c2cb1637e25d7712e4e505f5b3aa362b633399f844902a7c4
SHA512

f9675bb45abb128dd0d055f5a4f6c82879bae7466c6a7e2cd301fb6b005db67823f6a7412e8c7e7784ebefd371fea64593cf6d7de2756b2b9734c17b91ccef0d
SSDEEP

3072:fLIOL3GOpY8O/Ml6bajn0gee1GVebcq1jbWbAHzBoAx2tm7tyPeWS4S:fs8PJOklyajth1GVebRjbRlxbxAsB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec67dbb737cbb6842ccc94ab78af8454_JaffaCakes118

Files

ec67dbb737cbb6842ccc94ab78af8454_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9570aac8a80868a63516ccffb56a8132

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
CloseHandle
LoadLibraryA
ExitProcess

user32

CreateWindowExA
CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA

advapi32

RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegQueryValueA
RegSetValueA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyA

Sections

.text
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ