342c153c454ed3adc922869fe548c1b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

342c153c454ed3adc922869fe548c1b4_JaffaCakes118
Size

710KB
MD5

342c153c454ed3adc922869fe548c1b4
SHA1

1aa38b7eb4d30c9caab238f8200a2c9d4bd57dc6
SHA256

dbbc94c0d927a9bc69937fe5a9699a00575ab8b315b0ab86ed9e36b7fb0a9658
SHA512

09cf6c1e6dc9473133fedb50a1848885de383beb2d0af148ef436e3d73bf42b3b7f738181928351c00d9869c0ee6ce65e5d1290c148bc564a3701ac66282a5ce
SSDEEP

12288:PuNqRy6Rea78A2sKyWYh4t0G2pWdWr/WCPF3o1tydH0NFM4MLNsPAipb/y5LT:Enkei2sKynsZWlPF4uH0AqAipTy5LT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
342c153c454ed3adc922869fe548c1b4_JaffaCakes118

Files

342c153c454ed3adc922869fe548c1b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18c9fed6f333c6ccabcff381acd71157

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
GetCurrentProcess
LCMapStringA
CreateFileA
LoadLibraryA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegEnumValueA
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegCloseKey
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA

Sections

.text
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ