357b9930432cb95d00fa33301b3797bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

357b9930432cb95d00fa33301b3797bb_JaffaCakes118
Size

976KB
MD5

357b9930432cb95d00fa33301b3797bb
SHA1

3af8fadef91ad52e909da64bc3142e6d4db19306
SHA256

c87f4fd3b7665b05d5e845f7c9f1d3a856878361d67a44b97f1f16affae8d423
SHA512

fd66dfcc4986b2f9e80ecece064a87d26e732c458b5838a75189ac4fd1fa1265e74c4524d32ddeb122c9c233fc3f0927626b50ac19311f1e5021e10cddf66318
SSDEEP

12288:7mQchRyZ+O2nsKgB2ajqda+QFLnXvwOG6tjGul0TCfXaSQjlH+EL+XYPdHg6Y2rf:7Vcq+n9Bajq7QFDX0oHHKwoVvBrYAUK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
357b9930432cb95d00fa33301b3797bb_JaffaCakes118

Files

357b9930432cb95d00fa33301b3797bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45f25977ed7e93e81473f6525991b527

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
LoadLibraryA
CloseHandle
GetCurrentProcess
LCMapStringA

user32

CloseWindow
wsprintfA
SetWindowLongA
CharLowerBuffA
CreateWindowExA

advapi32

RegEnumKeyA
RegDeleteValueA
RegOpenKeyA
RegCreateKeyA
RegQueryValueA
RegCloseKey
RegDeleteKeyA
RegEnumValueA
RegSetValueA

Sections

.text
Size: 895KB - Virtual size: 896KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 732KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ