2d3ba6820495a7b7a041e93be1eaad20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d3ba6820495a7b7a041e93be1eaad20_JaffaCakes118
Size

168KB
MD5

2d3ba6820495a7b7a041e93be1eaad20
SHA1

f86acd2386ce290f3bdfad7cb9e51f7cfe78aa72
SHA256

772e09f468ec6b6d54b03965981155111786502004044d6e603dce49c935daeb
SHA512

d2af8987a4c4c4c9a40b7070044faae012e9f0fd98102019038f6462d2593fd487f11b41c16e6ac3007b407e1fdc6a89eaf5de2be15c7bac16a3e1603658bcbc
SSDEEP

3072:NnwFV9zPl0WL77nOeVCgyKkjdJgb0qnEdJQ51jO+fN18zRdjgPvmIv8:Nn250C7HTwghn+J+2RVyvmIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d3ba6820495a7b7a041e93be1eaad20_JaffaCakes118

Files

2d3ba6820495a7b7a041e93be1eaad20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b965e4913b22eaf0797dc8966e6d5de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
CreateFileA
LCMapStringA
ExitProcess
GetCurrentProcess

user32

CloseWindow
wsprintfA
SetWindowLongA
CharLowerBuffA
CreateWindowExA

advapi32

RegEnumValueA
RegDeleteValueA
RegSetValueA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegEnumKeyA
RegCreateKeyA
RegOpenKeyA

Sections

.text
Size: 151KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ