28a08f40f821adfcc759b5652ae207af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28a08f40f821adfcc759b5652ae207af_JaffaCakes118
Size

181KB
MD5

28a08f40f821adfcc759b5652ae207af
SHA1

33e65ee89fd303cf61ba4d582f38c03d67db98fe
SHA256

d363a981661ff625237cf7950a5076808dd145810276ad35a0fd3082346b5ffa
SHA512

2b386abf8d3c975c9412998b8ca5d663643ac665566acdf29bbc96374d6f8f32bc428b8eabca2d99548d44a41713698bf766dc794cf0530937d6394e1d57d7f0
SSDEEP

3072:gIN6CPPrVHipln3tpL3rYXVcAV0JHuURQUcNB5SdA5rqR6G+b9Uq85:QCBiLtpbMFfVaHdQzSkrkp+hd85

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28a08f40f821adfcc759b5652ae207af_JaffaCakes118

Files

28a08f40f821adfcc759b5652ae207af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8575e9bd41f4b43a1be780b26ea7ab8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
CloseHandle
LCMapStringA
GetCurrentProcess
LoadLibraryA
ExitProcess

user32

wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow

advapi32

RegCreateKeyA
RegCloseKey
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA
RegSetValueA
RegEnumValueA
RegDeleteKeyA

Sections

.text
Size: 161KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ