077a56e52aea62aac552e6d4c4681698_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

077a56e52aea62aac552e6d4c4681698_JaffaCakes118
Size

180KB
MD5

077a56e52aea62aac552e6d4c4681698
SHA1

4942e3db598e1fb50fe8d1fd58dddb889f8b1b56
SHA256

51922ecfa2e84e026cb0c2225b013e0d05fe84a9843dd69c651c6c40f56ebdcc
SHA512

bac683a5cad32b1f5e1850af493e267f0728d96008d062ee4659d1b858503bcef94f3b3a2216ba32254cf28eb845fa71e540d635e2c90bbec537f1736a72fc02
SSDEEP

3072:yurfuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuY:yq00G7fuk++IeDeeHc5lK/XXuHWV83M0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
077a56e52aea62aac552e6d4c4681698_JaffaCakes118

Files

077a56e52aea62aac552e6d4c4681698_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0fd3e0cd1349ed751e54cec90d3b962c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA
GetCurrentProcess
ExitProcess

user32

SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA
wsprintfA

advapi32

RegEnumValueA
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueA
RegSetValueA
RegCreateKeyA

Sections

.text
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ