095ec921bb434ad475a7a9d9358cd264_JaffaCakes118 | Triage

Sharing

General

Target

095ec921bb434ad475a7a9d9358cd264_JaffaCakes118
Size

444KB
MD5

095ec921bb434ad475a7a9d9358cd264
SHA1

c6b5fe37e0634767fe5ea8edc82c9a93762878f9
SHA256

4c15109dcc9acf8cdeac18aef8d73acbdf84b1dcad2fb9aba05b6952816f9efe
SHA512

3765b4ed0dca9b1eb153bcb8bb3536c67311b8396a92429d46595fafea43a0f57db845470294b24121f9641aeeb20880e511e4eb53ad69594fe2fb37f7ad69bb
SSDEEP

6144:p4ebhpFjcmB3wEmIWvs37/VEjH71xWxCWKEz77MbOVQgA1RWn1R7PNa1Cegmgj2s:p4eNAmtwEhWsriLDWxLebO++nfiCeWj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
095ec921bb434ad475a7a9d9358cd264_JaffaCakes118

Files

095ec921bb434ad475a7a9d9358cd264_JaffaCakes118
.exe windows:4 windows x86 arch:x86

843cedbd95c425b53b0bed0c747d7ca6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
LCMapStringA
CreateFileA
LoadLibraryA
ExitProcess

user32

SetWindowLongA
CharLowerBuffA
wsprintfA
CreateWindowExA
CloseWindow

advapi32

RegEnumValueA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

Sections

.text
Size: 424KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 208KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ