f36fa3fddd06f4d7df60dcfb45afa234_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f36fa3fddd06f4d7df60dcfb45afa234_JaffaCakes118
Size

212KB
MD5

f36fa3fddd06f4d7df60dcfb45afa234
SHA1

d0836062b4b3ee2f56a272d94986f535512ef657
SHA256

c1b45f70c36caef80634d5016e006aa7a360e4bcdab6fd27e9216a910d7196c2
SHA512

952dd5b6c1c1aa748b56f20f0557fc78310a0d6407cc14bf2808a7fc6902fc5b8cc755a634bfaa06b7b6a04f97d2c60c20e198790ec473c499c8df8106579db8
SSDEEP

3072:8FDNm7sukClDvtjeowD7HrTjNP1ZUoWoQpY86/1zQZ9WaU+rGo094Dp8hOJft9L:8FDNXuMoGzrNPZco1haD04lmOJL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f36fa3fddd06f4d7df60dcfb45afa234_JaffaCakes118

Files

f36fa3fddd06f4d7df60dcfb45afa234_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b89aae2c0fac8bb72ba5ca8976fb956c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
ExitProcess
CloseHandle
LCMapStringA
LoadLibraryA
GetCurrentProcess

user32

CreateWindowExA
CloseWindow
wsprintfA
CharLowerBuffA
SetWindowLongA

advapi32

RegEnumValueA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegSetValueA
RegDeleteValueA
RegEnumKeyA
RegDeleteKeyA

Sections

.text
Size: 167KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ