39605c587e7aaa2305b5105a6897be08_JaffaCakes118 | Triage

Sharing

General

Target

39605c587e7aaa2305b5105a6897be08_JaffaCakes118
Size

192KB
MD5

39605c587e7aaa2305b5105a6897be08
SHA1

7f9fdc2d6cd5a4e8747792ff4ccff89c6a6af7dc
SHA256

3521b844b842297653a44c6af9415026a417a8f0826fc502c2134510d35713bb
SHA512

47e6166f0200bbcc17354a64ced12badfd83a95ef03643b705f6e80f7b1a564a26d5717aefb206b32b5a358e819d3529839c27cc927167467aa50936838c6133
SSDEEP

6144:mQbCCdj8P5nk/UCCRl3Vs63P/atZuyPBEr7tl:mQbCCh8xk8CA933atZGr7tl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39605c587e7aaa2305b5105a6897be08_JaffaCakes118

Files

39605c587e7aaa2305b5105a6897be08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

52cb1939150b26fec7d61e96e1de05ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CreateFileA
LoadLibraryA
CloseHandle
GetCurrentProcess
ExitProcess

user32

CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow
wsprintfA

advapi32

RegQueryValueA
RegEnumKeyA
RegCreateKeyA
RegCloseKey
RegDeleteValueA
RegEnumValueA
RegOpenKeyA
RegSetValueA
RegDeleteKeyA

Sections

.text
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ