312f31a0a9be12dd193b89f1888052f2_JaffaCakes118 | Triage

Sharing

General

Target

312f31a0a9be12dd193b89f1888052f2_JaffaCakes118
Size

340KB
MD5

312f31a0a9be12dd193b89f1888052f2
SHA1

676951f4a4cf33ef68b363442c939ea913249887
SHA256

ad6767e537ceeea60ce14be053070b7d791a4c97578dbc3b2816ef4ce4b28f61
SHA512

335f9a2758919b67a985f4a2db299d3b62753043c182d73e9ac5a93601f03b6361e231fb42ce35ac8d717d2499b5d99ea7a303a1c89dc10fa1de093289a859f5
SSDEEP

6144:JVfi2XZ/EnO1zE04d5nXStEd1cV7BztJCV61WHhudA8jr8ALZek42mUe5mg:JJi2XQwzuitEd0JCo1QhuWYr8AgJ2Mog

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
312f31a0a9be12dd193b89f1888052f2_JaffaCakes118

Files

312f31a0a9be12dd193b89f1888052f2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5585d24065e4db0849b1eace8bc44537

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
ExitProcess
LoadLibraryA
CreateFileA
LCMapStringA

user32

SetWindowLongA
CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegDeleteValueA
RegOpenKeyA
RegEnumKeyA
RegEnumValueA
RegQueryValueA
RegDeleteKeyA
RegSetValueA
RegCloseKey
RegCreateKeyA

Sections

.text
Size: 320KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ