3a239f856a2f6f21ce6108ec9a4573a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a239f856a2f6f21ce6108ec9a4573a4_JaffaCakes118
Size

1.1MB
MD5

3a239f856a2f6f21ce6108ec9a4573a4
SHA1

eefaaaeaa04c53787d822a170d2babe883409f2d
SHA256

4350a3708fd9a1fdbcf2781008bbeb8d0208394c1519f9f0d42441d216027de6
SHA512

151dc7815c74da7217f0b4dfe55bbe2aa2aaca6b4c7efbba8dc681599e0732b7a898ad964f899c35776de61fe5cfe4734a88551a1f368f4e689e8e1361f44792
SSDEEP

24576:5gGqeSN6405q7hDNQYDvEDUR/nJeS2bL0Mo/189NoOUoA:5tLSlTQYDQURgUMo/yt5A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a239f856a2f6f21ce6108ec9a4573a4_JaffaCakes118

Files

3a239f856a2f6f21ce6108ec9a4573a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93c5ae41994d1bc79026b9e302316941

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
CloseHandle
ExitProcess
LCMapStringA
LoadLibraryA

user32

SetWindowLongA
CreateWindowExA
wsprintfA
CloseWindow
CharLowerBuffA

advapi32

RegEnumKeyA
RegQueryValueA
RegCloseKey
RegDeleteValueA
RegSetValueA
RegOpenKeyA
RegCreateKeyA
RegEnumValueA
RegDeleteKeyA

Sections

.text
Size: 446KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ