2629f957823a9ec818fd0e3b79fd9d2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2629f957823a9ec818fd0e3b79fd9d2a_JaffaCakes118
Size

152KB
MD5

2629f957823a9ec818fd0e3b79fd9d2a
SHA1

f1f5d9c375b65c58e34488089b702cbb2b8f3514
SHA256

e9835a529e493aeecef4b974f94cc7e0a2e0790c675fe3725a07e2861d0cbf3d
SHA512

ff665f67188b85c5d9b1dc23f939bcc37f9590354b5d6e530c760236607e26f77a5abf6686f09af6f0b69f07a93c6e589920334f892beed0ffc560f8c904d329
SSDEEP

3072:s6In/+4f4IfTAN2x4aYxuVKQQ60SkNHJnhRgXYEVUont0K:s6+2zoTAN2W7QKQQ63+JhRE7nt9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2629f957823a9ec818fd0e3b79fd9d2a_JaffaCakes118

Files

2629f957823a9ec818fd0e3b79fd9d2a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

351afe471071a28a43578fde80c96c70

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
LoadLibraryA
GetCurrentProcess
CloseHandle
ExitProcess

user32

CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegSetValueA
RegCloseKey
RegEnumValueA
RegCreateKeyA
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ