256a4526b2dde18fe0075c24f0060784_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

256a4526b2dde18fe0075c24f0060784_JaffaCakes118
Size

488KB
MD5

256a4526b2dde18fe0075c24f0060784
SHA1

70b5727db67b7ed27eb601f619050a1117a508c6
SHA256

e181afa3c4512d88c9e7a1987f86f2ca07a8552ec46a12f58f556fcc9a61456b
SHA512

80ae946ccbff55a5d329e94bc188524130149364de331c98bdfafbab96d6a2929e1765666d61fe27172ffe60606ddaac7f7b1eedf30778fd31b3b4a5d60bfa7a
SSDEEP

12288:LJ6CbtnNpbWd0G4SVJMvu7yjYMzIivvOLyAK+x9fw:LJ3btTbL4JMGctvGuAK894

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
256a4526b2dde18fe0075c24f0060784_JaffaCakes118

Files

256a4526b2dde18fe0075c24f0060784_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c5f621218139ec6e0f70625bc3df4e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
HeapCreate
LoadLibraryA
HeapDestroy
GetProcAddress

user32

CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueA

ole32

CoInitialize
CoCreateInstanceEx
CoUninitialize
CoInitializeEx

Sections

.text
Size: 400KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE