087bb7c02c30674d9e8da42b697e3ed1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

087bb7c02c30674d9e8da42b697e3ed1_JaffaCakes118
Size

245KB
MD5

087bb7c02c30674d9e8da42b697e3ed1
SHA1

a086c9065f4517763f4324298678974d09d639ce
SHA256

1840b491850c5b70bfde1d59fe9289464257e31d02cf42070cf9a477faaf041d
SHA512

45813d427d55be04c7127f79cc4ea09c07613e91af7194b5a92f8fa66ce15afa09e5b9bcc5b366ddb1190a5f0879f8166b8b47fa3a901149568a9a523d8a07d7
SSDEEP

6144:N9C4TKalKRowInMiDbVt107CSiQUFyQhQW2rKqiaxhz21zP:/C49SEMiDJ0p8DhKuzaxhYzP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
087bb7c02c30674d9e8da42b697e3ed1_JaffaCakes118

Files

087bb7c02c30674d9e8da42b697e3ed1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed47f0e6504d61e89919b7fc2070244a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
ExitProcess
GetCurrentProcess
LCMapStringA
CloseHandle
CreateFileA

user32

CreateWindowExA
CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegEnumValueA
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA

Sections

.text
Size: 203KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ