3a0de28f0e80cef2465e5b77d2223f88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a0de28f0e80cef2465e5b77d2223f88_JaffaCakes118
Size

204KB
MD5

3a0de28f0e80cef2465e5b77d2223f88
SHA1

dfaf7b01e03752a7fff6d1e4cb8fc31a9d87876b
SHA256

505a7a9d6991a1e79adebbfdf946e953dc4fd79d576e8de521393c37a599a2ed
SHA512

3766d294ff790dc053b7c928bbfd55d4d84c382a3b2218d902a1047aae377ed7a7308a3b5e2b081c171038d67fbde401111489cce5f3f696670c419922cdce9e
SSDEEP

3072:puEe3Uf0TfpAJJcApGsJkGCQC1ZtZwmKiYSjXUOCPdHNzVi88sf9q190A1U/x1K2:Ve3UfyRaKA1JkGkgmp3U3lHN5iNyqD2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a0de28f0e80cef2465e5b77d2223f88_JaffaCakes118

Files

3a0de28f0e80cef2465e5b77d2223f88_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47e2f7529bccb8fbf90c2eb92a22f8de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
CreateFileA
ExitProcess
CloseHandle
GetCurrentProcess

user32

CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA
wsprintfA

advapi32

RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegEnumValueA
RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegQueryValueA
RegCreateKeyA

Sections

.text
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ