190ddfd7c4806f45bfef4556009ecfc2_JaffaCakes118 | Triage

Sharing

General

Target

190ddfd7c4806f45bfef4556009ecfc2_JaffaCakes118
Size

395KB
MD5

190ddfd7c4806f45bfef4556009ecfc2
SHA1

eb4b7ecaa6af0d88642970e1748d86de0ecbcb63
SHA256

d676529a88d7827d5311ce4a7f1f68c153bb99d534be7acdd95398dc83f57a68
SHA512

a7c3afe5d55beb87c2a7ab3439b057be19f4286bb84130dd655c5df64f3be6dcc437d395286a28662e45c9dff25bf0797249ec6e903221933b726beb6be97a5f
SSDEEP

384:xBekI+TWyaFTxvQi3+RiHek+83U4TKERXNo+x:xB6QWya1xvQrIH+8E4ukOm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
190ddfd7c4806f45bfef4556009ecfc2_JaffaCakes118

Files

190ddfd7c4806f45bfef4556009ecfc2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfaca42da6e28b6951c2f2e6cab3dc7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
GetCurrentProcess
CloseHandle
CreateFileA
LCMapStringA

user32

wsprintfA
CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA

advapi32

RegQueryValueA
RegCreateKeyA
RegEnumValueA
RegSetValueA
RegDeleteValueA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 4KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ