2db133f9f39574bf95cbe7cfdefe1503_JaffaCakes118 | Triage

Sharing

General

Target

2db133f9f39574bf95cbe7cfdefe1503_JaffaCakes118
Size

168KB
MD5

2db133f9f39574bf95cbe7cfdefe1503
SHA1

e449089c5f23ac7d80294c77227de3d4046dd93d
SHA256

c30f5a78fc5c59e24a1e4264746e31b9913bc8e32f449def45d3ccf2f293325d
SHA512

559c3b0d120765b1aa1dba830e5091c0e5411c1dd81e2483ee49183ecbc3dd39ecfa51cdd128e8910ce8847f8e3e0fe85a2c4ce1f697daa4cfcd07a97eea2396
SSDEEP

3072:9NflqOF69+gD//Cs7uYsvs7DxIWbGCM+K0MQxj9FuKhwYtmIm/+D60:9Nf9F691D//CjRs71dbGCj/9F3whmD60

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2db133f9f39574bf95cbe7cfdefe1503_JaffaCakes118

Files

2db133f9f39574bf95cbe7cfdefe1503_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db1782a5f75ce20ef9b6c0463b26bc4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
CloseHandle
LoadLibraryA
LCMapStringA
ExitProcess

user32

SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegSetValueA
RegQueryValueA
RegCreateKeyA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 150KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ