3095e27f9672a4b2c6f34689476c4d8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3095e27f9672a4b2c6f34689476c4d8c_JaffaCakes118
Size

340KB
MD5

3095e27f9672a4b2c6f34689476c4d8c
SHA1

482fae9e753ffe31d43ed90faaac4b17f47e6365
SHA256

3df3e2b4bb5ea4825f33cc3959804a62a1147456a96bc35d8fb540f988bd37ce
SHA512

30fbb20ed01beb04b6a8b2509de2cec749999811c9f1322d2413ea40e0ab7a836caae7c7f6484589f0b21b28f1d92f358d70e47f255a43579c9df66ced9e6cf9
SSDEEP

6144:T67WABqzYEQXPqi2EYLFWwugerFZbvu4pF7HpwWCgxqs:T65XPb2/N8Zbvu4pJyhgUs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3095e27f9672a4b2c6f34689476c4d8c_JaffaCakes118

Files

3095e27f9672a4b2c6f34689476c4d8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cf54e99ea60b01059488acbc9a35335

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
ExitProcess
LoadLibraryA
CreateFileA
LCMapStringA

user32

SetWindowLongA
CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA

advapi32

RegDeleteValueA
RegOpenKeyA
RegSetValueA
RegEnumKeyA
RegDeleteKeyA
RegEnumValueA
RegCreateKeyA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 125KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ