2b9965c0d6835e28b21d1f009ee65e85_JaffaCakes118 | Triage

Sharing

General

Target

2b9965c0d6835e28b21d1f009ee65e85_JaffaCakes118
Size

173KB
MD5

2b9965c0d6835e28b21d1f009ee65e85
SHA1

2feb59266680032f1802833eea6c30506fa4dce9
SHA256

5dddea2b55b062c81fc1bbc07de6cd8ee2569de70644d64adf57b23d0f3543f9
SHA512

e5504692a0e6e5506b83dacb669e766f6ebdfdd5e09e9ec2f517f46dc636c7e3d0d0514250a71b19aace0b6389a12fd71cf788d413d35992c8100571f5eeab34
SSDEEP

3072:7IqELLKKHbTdIyZdRFuLt9wF+TGXAMrNjYE6Q+RGWnyZ0jc:7TwJbTdIyxFuLt9jSQMipQbWyZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b9965c0d6835e28b21d1f009ee65e85_JaffaCakes118

Files

2b9965c0d6835e28b21d1f009ee65e85_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91f8c4fc1c9058787caf9a413ce0d4cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
ExitProcess
GetCurrentProcess
CreateFileA
LCMapStringA

user32

CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA
CreateWindowExA

advapi32

RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegCloseKey
RegSetValueA

Sections

.text
Size: 126KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ