217783b8494bfe01936e2a0dab4600fb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

217783b8494bfe01936e2a0dab4600fb_JaffaCakes118
Size

172KB
MD5

217783b8494bfe01936e2a0dab4600fb
SHA1

7066189a105ee3162a7c0669c407de5d03c92a2d
SHA256

9542b37b1ea7a2f60ef4e24862c754cdd70d51ffbe5a0821858f84c4599e6ccf
SHA512

2e65aa51568dd97390221bcfdb9f9e1eb5471fb0f0e4511b321d5e3d58a7babe8689b8844f0826afcf0dffc5a224933ab4b15acab557ac3548154a1bc7cc5d0f
SSDEEP

3072:uaqrL6GDP6smlpU60NK8z/oiQSFpY3FuRLAjXQqb79hm20ZARmg5kYS1:uaqrzb6sYT0U8EiFaiL8dxhGAh5kv1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
217783b8494bfe01936e2a0dab4600fb_JaffaCakes118

Files

217783b8494bfe01936e2a0dab4600fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

39c96024a222e533033b00880f094cfe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
GetCurrentProcess
LCMapStringA
CreateFileA
LoadLibraryA

user32

CreateWindowExA
CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow

advapi32

RegDeleteValueA
RegCreateKeyA
RegEnumValueA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegSetValueA

Sections

.text
Size: 148KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ