3940f54e99de622e7d50f216c9671ca8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3940f54e99de622e7d50f216c9671ca8_JaffaCakes118
Size

476KB
MD5

3940f54e99de622e7d50f216c9671ca8
SHA1

b9489c81259c2d154d480c045cde85eb6d2752f9
SHA256

41c279abed2a44f899f7fdd43da7f85192305c515882d67b710153198232936a
SHA512

82703863da2d89cc13101737825201c4422c7952c1df50ae0653d287c268d9415d501e84adf6b922d6d089555e1047c7fb063708ddf49f4fdebd2151915c2e80
SSDEEP

12288:SmpukMZKkP8zmSeayjeJiKAWdgjbiHcopsY98DLNzJGgWhk3:lukMZKk8yjkiW8AkROhc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3940f54e99de622e7d50f216c9671ca8_JaffaCakes118

Files

3940f54e99de622e7d50f216c9671ca8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fe8328dff7bdcc945e14c2e472b008eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
ExitProcess
LCMapStringA
GetCurrentProcess
LoadLibraryA
CloseHandle

user32

CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow
wsprintfA

advapi32

RegCreateKeyA
RegEnumValueA
RegSetValueA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA

Sections

.text
Size: 445KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ