0876026a59bbe7ee2d0893995b773c66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0876026a59bbe7ee2d0893995b773c66_JaffaCakes118
Size

168KB
MD5

0876026a59bbe7ee2d0893995b773c66
SHA1

9c50f32b637300c3c0a1ee96e7e686d5f6fe641d
SHA256

c874ea02dc56ecc52440ee31b1e6d043f4a01eaa42e574117ccab5623c591271
SHA512

3c263f2961ba0592cb9906ce2036dde91241dfb864b0da549447b7256460ccf55936fcc6a9898bc951b87deb6cbd235a7b9420fe36b5d3399534fd4d8b2a3b89
SSDEEP

3072:FIPkpJZ5gMXMZ+8ki8i5B4o+TKQUb5/0GOAdiXb5NpuaKPY:FGkMOU1l7++/0GO9b5N8aKw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0876026a59bbe7ee2d0893995b773c66_JaffaCakes118

Files

0876026a59bbe7ee2d0893995b773c66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c411cff208c4f95637233b5b02059c10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
GetCurrentProcess
ExitProcess
LCMapStringA
CloseHandle

user32

wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow
SetWindowLongA

advapi32

RegCreateKeyA
RegQueryValueA
RegSetValueA
RegDeleteValueA
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey

Sections

.text
Size: 151KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ