318e8347defb767ad126e9f3dc35f42e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

318e8347defb767ad126e9f3dc35f42e_JaffaCakes118
Size

396KB
MD5

318e8347defb767ad126e9f3dc35f42e
SHA1

565eba0f01e238d19c5e4361de154585d575dacf
SHA256

b00a5ffb6f0e183742e0c4a15fba11c8fd94684d931a34ba4a55bb911df1af94
SHA512

53e98a40d1bc37d429122e8543a2259c91e65f9a57aad6b2668bc8ea7180e893c6ea92801e528405cdb67f6ebb444acaf8ac287f56bedc91efbbcf967fffa3e8
SSDEEP

6144:pmNjYuKj/4pTNSbaKoyeuVln3HRC0Upt50VKqttqL3gsYm+YM/pn0qzOIi19Dlrq:oAOnKoyeO3HkbpgZsMj0h0nVn2PG4o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
318e8347defb767ad126e9f3dc35f42e_JaffaCakes118

Files

318e8347defb767ad126e9f3dc35f42e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d864d14e4ecca15f14de22de960f7d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA
GetCurrentProcess
LCMapStringA

user32

SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegOpenKeyA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegEnumKeyA
RegCloseKey
RegQueryValueA
RegDeleteKeyA
RegEnumValueA

Sections

.text
Size: 379KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ