2c480066e857f01f69dbfc2d56f33b63_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c480066e857f01f69dbfc2d56f33b63_JaffaCakes118
Size

176KB
MD5

2c480066e857f01f69dbfc2d56f33b63
SHA1

e5411fb5e457d1ed00b97a6ef2156b0c38aebbec
SHA256

5f026af44aa60114f606547d59ef67e34c6d4bc384b7d94eb0e9a2a0b996dbd9
SHA512

c16dcf39c1a66507b710fbc10f8db360fb42b2acc2035bd16ff23e5f515664c41f69e9fab8e178cc3db7a0b1feb85a6595a011a27ff57c9ab85bcd01cbd6befc
SSDEEP

3072:KSrM/oXBcT7JkjkstZ1uy/Z17mko9CEkLFRRtjYJN6EtqAKxVshlG:Kmxcx8J5uybal9CjrKNQVsC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c480066e857f01f69dbfc2d56f33b63_JaffaCakes118

Files

2c480066e857f01f69dbfc2d56f33b63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c7277367da4ebd3ebf3ba4e650d326b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
ExitProcess
LCMapStringA
GetCurrentProcess
CreateFileA

user32

CreateWindowExA
CharLowerBuffA
SetWindowLongA
wsprintfA
CloseWindow

advapi32

RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegEnumValueA
RegDeleteValueA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 4KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ