35c0b10182bb4817f3eaa1e0c24651ba_JaffaCakes118 | Triage

Sharing

General

Target

35c0b10182bb4817f3eaa1e0c24651ba_JaffaCakes118
Size

196KB
MD5

35c0b10182bb4817f3eaa1e0c24651ba
SHA1

e3f2c7d0ceb79c023f2d0c5283943a5cf2abef7b
SHA256

083fcb48ca732cb38552a0b53d8a37bee9db014a97a6b1bd7adf0fc9f5045fc8
SHA512

1b4fe17533f34e64ee0d6164a8e137e9e7fd05c1c2b5b89ca6e387b430b28b408be8440da6b6eaf066c91d850d20461ca1858ddfdbe7af44196e4852dfb10905
SSDEEP

3072:e8LMNAMAd/P1zDwS3Xfv8bvvAwRce5XbxunW3ltny9vjQzRWqyuSBJEJ:7+Ald/5cSnXswDe5XbxFVEMRWqpGJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35c0b10182bb4817f3eaa1e0c24651ba_JaffaCakes118

Files

35c0b10182bb4817f3eaa1e0c24651ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7609aff9f504b39edeee79a900d2c8a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CreateFileA
LCMapStringA
ExitProcess
LoadLibraryA
CloseHandle

user32

CloseWindow
SetWindowLongA
CreateWindowExA
CharLowerBuffA
wsprintfA

advapi32

RegSetValueA
RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegEnumValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyA

Sections

.text
Size: 126KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ