25444760e6f47c360e8af160431bb19c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25444760e6f47c360e8af160431bb19c_JaffaCakes118
Size

232KB
MD5

25444760e6f47c360e8af160431bb19c
SHA1

8873061a875b7781666f587e55c597eeb5e7a2fa
SHA256

01d0467cf6864375a1de9d68605da9b2e9c70bc8d8410fbf9a679f332e1db02f
SHA512

2a46fbf81c33cfa3d2bdab837085461e598ef912375a8202a2e45c2b769fbfa15ebac9ba63269eff26f2ae7009c4797ce225b277c88f13acc98e313c1227c4db
SSDEEP

6144:rztfyGSAxpCQQQp+s5H/B20qYo/6knRQc0a19WYetKhOxFlXjtXKJN1:9fvSAxp5ys5H5NkF0CFesqfzIP1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25444760e6f47c360e8af160431bb19c_JaffaCakes118

Files

25444760e6f47c360e8af160431bb19c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebec1aa884354348e444446601950c23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
LoadLibraryA
ExitProcess
CreateFileA
GetCurrentProcess

user32

CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA
wsprintfA

advapi32

RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegEnumValueA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegQueryValueA

Sections

.text
Size: 209KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ