2282ce011496d00ab7291480fb64007a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2282ce011496d00ab7291480fb64007a_JaffaCakes118
Size

140KB
MD5

2282ce011496d00ab7291480fb64007a
SHA1

35553416bbabad17abcbe308881a7a04c0bf6800
SHA256

f71d89f105505b96818f033fb11eace6ffa495065b3b10e082405a9e40ff2e02
SHA512

df40a14d1dc8fa0d3a8acab05ad9fb1ae0f4fea9ebb0958f84a0c01315343374dbf3ff5ee4e78eefe657c2aff4fb963471c26a905dacc05450318b4635e481ab
SSDEEP

3072:dFIY6AAS4hCEzgtriaL1Ak5S7FVoCBZ+wJMplvGrkNgnwwZL:dF1MS4sEWXL1AP7FV92vRwV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2282ce011496d00ab7291480fb64007a_JaffaCakes118

Files

2282ce011496d00ab7291480fb64007a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6256af74b9eddef180aacece7f60f3bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
HeapDestroy
LCMapStringA
ExitProcess
CreateFileA

user32

SetWindowLongA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueA
RegSetValueA

ole32

CoGetClassObject
CoInitialize
CoCreateInstance
OleRun

Sections

.text
Size: 44KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE