32bc335091472bed0fa89d69226bb7df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32bc335091472bed0fa89d69226bb7df_JaffaCakes118
Size

160KB
MD5

32bc335091472bed0fa89d69226bb7df
SHA1

d4779be271810898bee3f0cd7cb4ada42c7cc59d
SHA256

64f2484279d1552ada50a53736fc966f6ca4b81b6c70898b48bfe338f77e5bd8
SHA512

b442a2fe8f5137f54feb7bde40387afb78ec9fe594ffff6b5e980f2a57fa812257cab26a87ea4786bef0085042d414b380b46dcacb55ebbbf3e2aeb08c8e9ed7
SSDEEP

3072:SLGtJIlP35RAK7ujCek/+TxIYYBpBWbJl/Ih2y4rqgJgBFoPcqxe:tzIl87jzhTxIZBGJG5ga0Pc1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32bc335091472bed0fa89d69226bb7df_JaffaCakes118

Files

32bc335091472bed0fa89d69226bb7df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3216101ae2c1b1870105a6f13c824e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
ExitProcess
CreateFileA
GetCurrentProcess
LCMapStringA

user32

SetWindowLongA
CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA

advapi32

RegEnumValueA
RegOpenKeyA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegQueryValueA
RegDeleteValueA
RegCreateKeyA
RegSetValueA

Sections

.text
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ