300830365c9324950c67611d6ca16531_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

300830365c9324950c67611d6ca16531_JaffaCakes118
Size

168KB
MD5

300830365c9324950c67611d6ca16531
SHA1

d057c5532d00ad4d3d897a76e7b4a23e8467170b
SHA256

0b32450fec36d987c5c0b0f84ba7da7c74b8cb0bc0b64dab6a70ae3e85a97407
SHA512

18d5dcacb9bf3bbb2d8a96cebaba426814c29ee42067d3e4f18429004b70ffdebe303393d4ad7af04eadf1a544f5bf5d43df354f2086b69b420e48f5a017a3ed
SSDEEP

3072:Sbb+2yFFLvf9ntYHDQjhG9sxg4dDaYUPNBzXCg/VpOx1Qk4/34ls1bEKtGmPWe8D:S3tyFhzKEhGGdetNBrCCVp4Gk6is1A0Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
300830365c9324950c67611d6ca16531_JaffaCakes118

Files

300830365c9324950c67611d6ca16531_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfa9b9f0396c57b7d30ebf25dcd04766

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CreateFileA
GetCurrentProcess
LoadLibraryA
CloseHandle
ExitProcess

user32

CharLowerBuffA
CreateWindowExA
wsprintfA
CloseWindow
SetWindowLongA

advapi32

RegCreateKeyA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegQueryValueA
RegSetValueA
RegEnumValueA
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 151KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ