32bb3f77a3a355dae25f0832d0565bb3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32bb3f77a3a355dae25f0832d0565bb3_JaffaCakes118
Size

188KB
MD5

32bb3f77a3a355dae25f0832d0565bb3
SHA1

8ced05e43b4dce064904a2e8e6f3474989486421
SHA256

580b4d084ac5e03765b5817d4aec545279eed505bf739b31eed9efa33f12ce9d
SHA512

f7474b48c02c004ad853a4412b098996bf5d7ac53872cd8e487ecf1b883e50608fe673cba3eea7b6f88cab077ba98b7650c6f389fe22712e4724144d0220bb01
SSDEEP

3072:q4zW96J8XO9/C4a57kx/WGATl+pW/xV5kNHbHDSjnThFc5ntWd0:qmW96J8g/C4a5gx/ATIyIHbejThFc5C0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32bb3f77a3a355dae25f0832d0565bb3_JaffaCakes118

Files

32bb3f77a3a355dae25f0832d0565bb3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dde00f31a1e691cd5c06e889d5181a96

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA

user32

CloseWindow
CreateWindowExA
SetWindowLongA
CharLowerBuffA
wsprintfA

advapi32

RegDeleteKeyA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
RegSetValueA
RegEnumValueA
RegEnumKeyA
RegCreateKeyA

Sections

.text
Size: 164KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ