3b6ae51c3870de0785b2fcbbaf9cbff3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b6ae51c3870de0785b2fcbbaf9cbff3_JaffaCakes118
Size

224KB
MD5

3b6ae51c3870de0785b2fcbbaf9cbff3
SHA1

33a0e87d563788d48ca18bd434bb25ecc7fa8824
SHA256

ac8762f7cf92402afc4125eceaa3a9100693b31fa7a70dbdf2800bed2afe8616
SHA512

4aa52a09e8004dd4c6a6fcffb03480e431ea29cf39f973ebccf3beef48010611eac4411e5abd07258ae54a67385f6e5ded90cb5273e2c9e11d5448191ae9f673
SSDEEP

6144:lxC596oB6U20rPQ5ArGNUFCtxrAdMqZhtkLH7Djo/C:l496AA0HuhtZ2PbUH7Db

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b6ae51c3870de0785b2fcbbaf9cbff3_JaffaCakes118

Files

3b6ae51c3870de0785b2fcbbaf9cbff3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d358c241206489fd3a9d97d04d03ba15

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
ExitProcess
LCMapStringA
CloseHandle
CreateFileA

user32

CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegCreateKeyA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
RegEnumValueA
RegSetValueA
RegCloseKey
RegDeleteKeyA

Sections

.text
Size: 206KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ