2fe21eff7ca71e1af45bdaf00f1e2365_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fe21eff7ca71e1af45bdaf00f1e2365_JaffaCakes118
Size

532KB
MD5

2fe21eff7ca71e1af45bdaf00f1e2365
SHA1

33da9b81b9f368e52db3442f7f8fd8f928e480dd
SHA256

74e4b63c767630af60119e8bac97322504a40186744075acd006935df8ebf4cb
SHA512

505847a88338a6e03330b76ad85448644d48d3e953fe39a6773f6e345009d30c2509fd5b0e8dbad4ca7aa4d83f0aa8bbc7e4a16db489365a7409f596ea14122b
SSDEEP

12288:IthqHiOEgWUrAuKaLaeRKO/rMTJ+gUq7K/e4TI0ki0DFA7O:It4ZdWUrAuKaOeD7t/e4c0W7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fe21eff7ca71e1af45bdaf00f1e2365_JaffaCakes118

Files

2fe21eff7ca71e1af45bdaf00f1e2365_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4d4e1687ba050472ae1eabf94ce3ce05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
CreateFileA
LoadLibraryA
ExitProcess
GetCurrentProcess

user32

CharLowerBuffA
wsprintfA
CreateWindowExA
SetWindowLongA
CloseWindow

advapi32

RegCreateKeyA
RegSetValueA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA

Sections

.text
Size: 441KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE