fe9d8dc890c8074268668e3239a72a24_JaffaCakes118 | Triage

Sharing

General

Target

fe9d8dc890c8074268668e3239a72a24_JaffaCakes118
Size

252KB
MD5

fe9d8dc890c8074268668e3239a72a24
SHA1

6c322145011cdfcb02895bca7c58608984a84b23
SHA256

bcea8b2cfe33058f967aacca6ef3a3203280d64457a1fb2a69f2b198f5f4a099
SHA512

28357a4cf475bec8456164f96f4b4206851d9a7ce234015f1bc3ed7e98ad910772e38d4064e3723a56db2dd9e2fea83b1581ba421f9bc96940ccc2a60f54f864
SSDEEP

6144:ocXZvHoUqpAhAq+EOa5R1p0+jiJQOM5fSkfl6r1UR1hq:bEpsAqTOa5ZtbvqkfQr0q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe9d8dc890c8074268668e3239a72a24_JaffaCakes118

Files

fe9d8dc890c8074268668e3239a72a24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4fbbbdabeb89aa43a4da99fda831f2df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
CreateFileA
ExitProcess
GetCurrentProcess
LoadLibraryA

user32

CloseWindow
wsprintfA
CreateWindowExA
SetWindowLongA
CharLowerBuffA

advapi32

RegEnumKeyA
RegSetValueA
RegDeleteKeyA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegEnumValueA

Sections

.text
Size: 151KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ