075fac913b6612a2eee64cb957fd920f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

075fac913b6612a2eee64cb957fd920f_JaffaCakes118
Size

292KB
MD5

075fac913b6612a2eee64cb957fd920f
SHA1

bb92384f033b25b3b8d04c3061c4bf525c03c8bb
SHA256

2065feec78fce1ba9e1fc526536db4be6115d1498af7b3a460d2dd57e2c4f742
SHA512

5a0ecccdb3254d0ac1e8eb7de3c6972b948a100c5a4378492665e3598d80c507fac240f36d0297085632abc5c700bccb13f42c0eea3d290abdd299c90fc86368
SSDEEP

6144:JVsEcSxl/j0aJCq64QbaijVtrkMRxamkfBfV+4We85R6:bsEPxlb84Qbxj7rBRDkptWt6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
075fac913b6612a2eee64cb957fd920f_JaffaCakes118

Files

075fac913b6612a2eee64cb957fd920f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

43f6bebe76eb69d487643293ce960502

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
CreateFileA
ExitProcess
LCMapStringA
LoadLibraryA

user32

wsprintfA
CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA

advapi32

RegCreateKeyA
RegDeleteValueA
RegQueryValueA
RegCloseKey
RegEnumValueA
RegSetValueA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 210KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ