fc22de9e0ecaac1ba0acd859e82be178_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc22de9e0ecaac1ba0acd859e82be178_JaffaCakes118
Size

564KB
MD5

fc22de9e0ecaac1ba0acd859e82be178
SHA1

c1831afe9e54a17ff240c07d06128cf160d2f681
SHA256

8fca004feb19cf8bfcdee402dccf2d32c485e497d3ed32a9b333075d8aba6fd8
SHA512

e5dd56ac952f123c680a98ab3bf21ac4c4678c6090e76102ee32fdf66425449939be69af1bf2517d366685c60f626c7f666d7646818a9af3fea1aeb38b3fc312
SSDEEP

12288:4ybnbKVY5Dq3XkyFm1tFP1j8vrjnnBqSLAjMP2XYNLIju:9b+VYYPm1tjjy7nBjAjW2X8Lb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc22de9e0ecaac1ba0acd859e82be178_JaffaCakes118

Files

fc22de9e0ecaac1ba0acd859e82be178_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d5e0b21d3df37a1e4bf2363ff9790bef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
CreateFileA
GetCurrentProcess
CloseHandle
LCMapStringA

user32

CreateWindowExA
wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow

advapi32

RegEnumValueA
RegDeleteValueA
RegEnumKeyA
RegCreateKeyA
RegSetValueA
RegCloseKey
RegQueryValueA
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 538KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ