350eab3a5ac48b75237990f4aec44bfa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

350eab3a5ac48b75237990f4aec44bfa_JaffaCakes118
Size

236KB
MD5

350eab3a5ac48b75237990f4aec44bfa
SHA1

4f4542de71aa77ef597db6f900dd125ec8cb05ea
SHA256

67a864552a0e521a6d2fc93d41de68224b5f1f34c81a7b6045d11560df9d04d6
SHA512

79cc5944617179b766ef7ce399528ef307b14dd496d984276543c9bbfa0656b0554ed52de1b98e2d21a83a633ba65669f813fd59953f1f65f8a35ca30d2d8921
SSDEEP

6144:AIN7dAckRwbQZLrtlWAnBL6n9Bw1gWj5auyZpRZkipmrk8:jFgwbQZLHWABmbAj5azHi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
350eab3a5ac48b75237990f4aec44bfa_JaffaCakes118

Files

350eab3a5ac48b75237990f4aec44bfa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

daf62d98d94c9629fb00f382a92909fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
LoadLibraryA
CreateFileA
GetCurrentProcess
ExitProcess

user32

CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegSetValueA
RegEnumValueA
RegDeleteValueA

Sections

.text
Size: 215KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ