1867217cd0fadc09ca5244b28ad088ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1867217cd0fadc09ca5244b28ad088ec_JaffaCakes118
Size

173KB
MD5

1867217cd0fadc09ca5244b28ad088ec
SHA1

694e22c38bffb2dd09dfcdb3be4a6d22844198ff
SHA256

d781f232fa29121c3fd83ab0d0a1d86ca41e141de1e847014944c6e7fc1bcce7
SHA512

4538ec44bfa6024ff93552a67684487725c2e189ef13078144193433ed6d152fc3bbc77705e46e3843c93709f52234701a64a42cf7ad56b33c123a297586c61a
SSDEEP

3072:7x7ukbYtQoBieFrqAYywv/PWXoTt8oRPR0qRFhwvyX7texxDW/UY:lukbYtQoB3F/lwOXoTt8onTRFhwvyEyV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1867217cd0fadc09ca5244b28ad088ec_JaffaCakes118

Files

1867217cd0fadc09ca5244b28ad088ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8392642d7d8ffee81bf3cf4fcdcb3dbc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CreateFileA
LoadLibraryA
CloseHandle
GetCurrentProcess
ExitProcess

user32

wsprintfA
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA

advapi32

RegSetValueA
RegCloseKey
RegCreateKeyA
RegEnumKeyA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueA
RegOpenKeyA

Sections

.text
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ