3ab2ab3938277c84b81c742bdb63a501_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ab2ab3938277c84b81c742bdb63a501_JaffaCakes118
Size

186KB
MD5

3ab2ab3938277c84b81c742bdb63a501
SHA1

7fb5f2336a8a52c500a0f72a1fe19cde0e6c4142
SHA256

ea018e12c4de087e593c6835da86218f22853d5dedeff7973d715c322ceaf568
SHA512

436653264052793ea96cc93ed4435769257779f3fa7620a133e7bf0d6bda26d8a7c0e5524ec2306b552ce8e8485eac9acc767a6a3232fdbc62820dfd06ad1929
SSDEEP

3072:2zPyzwaYJiHlyXbCpGrPUKGYwuZwvCVt8TocHySVilPh+beeKlqqg:iPyzwarHlyEWPDf78TPSVhQbeeK4qg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ab2ab3938277c84b81c742bdb63a501_JaffaCakes118

Files

3ab2ab3938277c84b81c742bdb63a501_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2453675351a8602c3c8806d2fd7e37bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
CreateFileA
LCMapStringA
ExitProcess
CloseHandle

user32

CharLowerBuffA
wsprintfA
CreateWindowExA
SetWindowLongA
CloseWindow

advapi32

RegEnumValueA
RegSetValueA
RegQueryValueA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegOpenKeyA

Sections

.text
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ