089753680677a21ccbde8ca9a0e3d79d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

089753680677a21ccbde8ca9a0e3d79d_JaffaCakes118
Size

212KB
MD5

089753680677a21ccbde8ca9a0e3d79d
SHA1

75e8d725838df2cc4609e25dbf623ed5f167990e
SHA256

d4567f6e00fd13ed3af70091dfb219b3adeb0982088dd3f25a864f19b71acfdd
SHA512

8a572edfb34f6998c6b439c3b6082cdfb6a8614e95b7aaf539e3c242ce9ba677b9b6806d80dffc1846c61cef9a9675b9eaee920a6b079f8caf3e7cb7c2ff24b2
SSDEEP

3072:+87TdxnKrTIJB7xQpd5igvH8pIxAsdSPhCYJVfQUNhP1iFpBqcRRyZFueYLvwJCV:+8vdErTCBxopxAsk1ffPupUcDyZF3o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
089753680677a21ccbde8ca9a0e3d79d_JaffaCakes118

Files

089753680677a21ccbde8ca9a0e3d79d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

41b927b35a6d17907e43c44c61010feb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
CreateFileA
LoadLibraryA
LCMapStringA
CloseHandle

user32

CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA

advapi32

RegDeleteValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegEnumValueA
RegSetValueA
RegCloseKey
RegOpenKeyA
RegCreateKeyA

Sections

.text
Size: 166KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ