2413fb3ed109f304a2beb9a3aeb02ad8_JaffaCakes118 | Triage

Sharing

General

Target

2413fb3ed109f304a2beb9a3aeb02ad8_JaffaCakes118
Size

156KB
MD5

2413fb3ed109f304a2beb9a3aeb02ad8
SHA1

4f1cab4b9fdacf3951eaea8ec0b59d4156c028c9
SHA256

a7fc2d77ab752bde13524cd0796035d236950c5a6dad62803e9dbcc960fb0da8
SHA512

90ff1a6517a7f7383a34b13bab03779b1a4adcac01e1a87b7d8bb92d1a4f9b1990550546c3a92c20377481087982ffe5e4a3e9d20082effb1a7aa89d61e21ff7
SSDEEP

3072:LBZk83kJM7BYc/+YuXBKH3/VMijj5r2QXfNnygVkhvedDZmx5J8:LRoMNYCtUBKXyijtbX5yikhvymxX8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2413fb3ed109f304a2beb9a3aeb02ad8_JaffaCakes118

Files

2413fb3ed109f304a2beb9a3aeb02ad8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6aef3a2932c028736616a2eeb096613

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
GetCurrentProcess
LCMapStringA
CreateFileA
LoadLibraryA

user32

CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegOpenKeyA
RegCreateKeyA
RegEnumKeyA
RegSetValueA
RegEnumValueA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ