2391bc7e780ce2e467980022dace4cda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2391bc7e780ce2e467980022dace4cda_JaffaCakes118
Size

756KB
MD5

2391bc7e780ce2e467980022dace4cda
SHA1

fa7f12d140ee26d21e26c73ad663233ee728de6b
SHA256

d8e0c23b78c44c3c19b7260fae821f50c867142fddb122890e6f0db4e238f5bf
SHA512

7b780dcfdd17a932609b204954140af1dc0467403516c7f91fe82bb3a893ab41c0c8738dad7ffc6bdeb02ef80ec7b3c29a11d52bf380742eb0afc6a88cb49347
SSDEEP

12288:UuniLnhneiGWz8gCh5F+cbo6ccoHofpoR1F11TNP0V6JhL:XQnUij0L+3coww1F15NMV6H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2391bc7e780ce2e467980022dace4cda_JaffaCakes118

Files

2391bc7e780ce2e467980022dace4cda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ff02351f31e3a0c6e92903096eb0bf1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
ExitProcess
CloseHandle
GetCurrentProcess
LCMapStringA

user32

CreateWindowExA
CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow

advapi32

RegEnumValueA
RegCreateKeyA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegSetValueA

Sections

.text
Size: 593KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 280KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ