25dbfc94fa9bcb2a32eff79b1baa360f_JaffaCakes118 | Triage

Sharing

General

Target

25dbfc94fa9bcb2a32eff79b1baa360f_JaffaCakes118
Size

385KB
MD5

25dbfc94fa9bcb2a32eff79b1baa360f
SHA1

445a4a7e4cc9a52f277156ef2389ca3e20243b76
SHA256

c1ae0f377d06e4d17d6fa91bc5a4d4c17643c7cff02fcfab427944b9ac3bb227
SHA512

ac65fa574b90550a7450f49351d1323944ac6cf3842bbce253e0c19a639a251ac29ba2d74a8f02f799b3344be483d33bd251e0cc147f07f75f56d37b08cf515f
SSDEEP

6144:d95izn7Lm5xXE0YczV8FF81l1E8NPbvBkaqHF/vp7OAEN0qPaay8QTNo:z5FXz1Vy81lmuKFJh7Hk0gaWqK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25dbfc94fa9bcb2a32eff79b1baa360f_JaffaCakes118

Files

25dbfc94fa9bcb2a32eff79b1baa360f_JaffaCakes118
.exe windows:6 windows x86 arch:x86

0745ed295048b47a954cd6273a8fb311

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
CreateFileA
LCMapStringA
GetCurrentProcess
CloseHandle

user32

wsprintfA
SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegQueryValueA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegEnumValueA
RegCreateKeyA
RegEnumKeyA
RegOpenKeyA
RegSetValueA

Sections

.text
Size: 264KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ