2c9dfdd22a178837d758d2f2e6a7b5bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c9dfdd22a178837d758d2f2e6a7b5bc_JaffaCakes118
Size

193KB
MD5

2c9dfdd22a178837d758d2f2e6a7b5bc
SHA1

f5c6212e25a3b97048d8c5afe7ed0c25ea8a8122
SHA256

da895555b13f64351baee703adcaf05bbceab010fc10bddf59167d41a746a37e
SHA512

4dc1e651cec95b19e9744eb569312f939a99b40a86567d199e3a2e805b16e164bc6ca404df1c58aa0e5a4eabae762c5c7b9e35f79f4f69869212b585006eec8d
SSDEEP

3072:u0fcUR8K/Na+GbEfVGotFYwARJH78P1zsBudnLMgdij2yxFqxuzTzG2Gcmw:pfc28KspYfzntqV78P1zzUx4eO/E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c9dfdd22a178837d758d2f2e6a7b5bc_JaffaCakes118

Files

2c9dfdd22a178837d758d2f2e6a7b5bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

03f8d6046d2ff08cbf66bff465cac146

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
CreateFileA
LCMapStringA
LoadLibraryA
ExitProcess

user32

CreateWindowExA
CloseWindow
SetWindowLongA
CharLowerBuffA
wsprintfA

advapi32

RegQueryValueA
RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueA
RegEnumKeyA
RegEnumValueA
RegCloseKey

Sections

.text
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ