1a1c53161f568697fe55207d878fb274_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a1c53161f568697fe55207d878fb274_JaffaCakes118
Size

189KB
MD5

1a1c53161f568697fe55207d878fb274
SHA1

3bff0e0c7c71845362e5d51a0aa2fc6e1b36ae28
SHA256

75720df500dc5779b68b1f460f2dbd0f1a040e11a312c4a31ca14b9b63805647
SHA512

4866d0e10a0973dfdca847e3bcdbb8e80646c2563a2ad27a44cff49228f0ffc4ee84197712f4fb51b46f9f64b6ceef47a8c17cd277b66fb6aad946ae061c8e7f
SSDEEP

3072:yRmiuAIM9yIA5UO7hWBhlZPDYDfmKj4TRw8gmBxVAcnQzKKsMObuBNL7Rxv3ZfYE:3iuXV5UO7hWHPEmdllgmBxS0yNnRxv37

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a1c53161f568697fe55207d878fb274_JaffaCakes118

Files

1a1c53161f568697fe55207d878fb274_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1acb90b91bc6033461553d98e66dc3b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
CreateFileA
LCMapStringA
LoadLibraryA
ExitProcess

user32

CharLowerBuffA
CreateWindowExA
wsprintfA
CloseWindow
SetWindowLongA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegQueryValueA
RegSetValueA
RegCloseKey
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 163KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ