2441ddf54cff000855ae7a2122801d1d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2441ddf54cff000855ae7a2122801d1d_JaffaCakes118
Size

174KB
MD5

2441ddf54cff000855ae7a2122801d1d
SHA1

ebc58d0b49a1fbe743a32e59932120e86ef86ffd
SHA256

96f1ef525a4acbbcc73401d69438e85f191bff170610e8a5e2bf449aa19ca6df
SHA512

8f6612686f44ee6bf70849228054042d95d53e152469e587bc0d09c7b1f992248c93a8420b0565865679d7288e5b45f886b72e03082994d9abb9373188582eca
SSDEEP

3072:zGhFiY59R6GV256LqSFF2uK1RE2GbMj2heNBhFuDluZaWXvW3430bBsgiYNwRE5:zGZ9R7HL23M2l2hejG8cuveXbGgiYuQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2441ddf54cff000855ae7a2122801d1d_JaffaCakes118

Files

2441ddf54cff000855ae7a2122801d1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f2ea16687bdd5032a4fb65b2fe1925bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
ExitProcess
LoadLibraryA
CreateFileA
LCMapStringA

user32

CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegEnumValueA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegCloseKey
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegSetValueA

Sections

.text
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ