1c3e5e0b9f85f39ce1483e49cba3bd0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c3e5e0b9f85f39ce1483e49cba3bd0d_JaffaCakes118
Size

212KB
MD5

1c3e5e0b9f85f39ce1483e49cba3bd0d
SHA1

1d3055fbdf483f6612636565cc21d91ca752f5c7
SHA256

024d371d60ac9daac85d528da18f21902a6f418d35ee79823134222d857ea761
SHA512

1e64c9fb12159dd5803b11bfd589b8eaef3f00c2eb9465089288b6264cb29055f9f3df8650178fdad9970a8fd444e73c21d81b98f480cb1732051cdf3079f583
SSDEEP

6144:lQ1DxUN6g9+0bzQ8DfjvsBOnTd1VNK99ZK:m1iZg8XvsIDVN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c3e5e0b9f85f39ce1483e49cba3bd0d_JaffaCakes118

Files

1c3e5e0b9f85f39ce1483e49cba3bd0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78258a8f08b9a214dcd5683e1184a6fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
ExitProcess
GetCurrentProcess
CreateFileA
LCMapStringA

user32

wsprintfA
CloseWindow
CharLowerBuffA
SetWindowLongA
CreateWindowExA

advapi32

RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegSetValueA
RegCloseKey
RegEnumValueA
RegEnumKeyA
RegDeleteValueA
RegQueryValueA

Sections

.text
Size: 185KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ