3b12ec6385d7cdff3100ac62230cae1e_JaffaCakes118 | Triage

Sharing

General

Target

3b12ec6385d7cdff3100ac62230cae1e_JaffaCakes118
Size

164KB
MD5

3b12ec6385d7cdff3100ac62230cae1e
SHA1

000e586df7d4bf3fa3008c1e21dbd19041c323a5
SHA256

14a4f644f8a7e0301a2bbacb37552ac4d0db1a72b626e12453c62eae74008d6b
SHA512

2c7e4ba8b84530f01b598f5eafe0a19b536be0e295890216f0e7cde6ac80261849196cf6c18f91b125fe4207bf793c244fa5302680dcad08d1f1fc3e6b20f00f
SSDEEP

3072:153pEDL+qL7jnMxM5fYBlOrRYrg5nQWaXxsAJMkvPbQqePT5PCE1NrasNW6dZwye:LWDRLHMxMVYBlOrRFWNVvjQTr5PCbWlo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b12ec6385d7cdff3100ac62230cae1e_JaffaCakes118

Files

3b12ec6385d7cdff3100ac62230cae1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f972dd0ed2f3724f946259e04ba0a492

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
CreateFileA
LCMapStringA
ExitProcess
CloseHandle

user32

wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueA
RegCreateKeyA
RegEnumValueA
RegOpenKeyA
RegQueryValueA

Sections

.text
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ