37831d83d4b4d172c5e811968cc58b00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37831d83d4b4d172c5e811968cc58b00_JaffaCakes118
Size

184KB
MD5

37831d83d4b4d172c5e811968cc58b00
SHA1

8d0cd5c6fba988cf21f064f6f6caca69680103c1
SHA256

f05ed12b485e8c110282a4c99724973a8fbc6bd5e4cc87a74cd40c4c5b741477
SHA512

89c2b89dcdcc27a4419c044c9b3e6fff831cf17070f92a4364b31fefe86d272341280acc160d76cec7e27732e0ab557baf6aa51d1efbf25b3df647170c0939a0
SSDEEP

3072:C/tInfKPQo4/huzim2eHrxRO1xnQ4T8dOeurHJNLoCcQ/nzZC08/u:yGfbvJuz92+OG4wdOHVNLoMtC06u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37831d83d4b4d172c5e811968cc58b00_JaffaCakes118

Files

37831d83d4b4d172c5e811968cc58b00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfb03f811956e01b54a579934d3baa16

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
LoadLibraryA
ExitProcess
GetCurrentProcess
LCMapStringA

user32

SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegDeleteValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegCloseKey
RegQueryValueA
RegEnumValueA
RegOpenKeyA

Sections

.text
Size: 166KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ