41ea689c9ebeaed7c816ea8d8afd3314_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41ea689c9ebeaed7c816ea8d8afd3314_JaffaCakes118
Size

632KB
MD5

41ea689c9ebeaed7c816ea8d8afd3314
SHA1

0f4e97e86189f6ed42a40f15c82c674fe713f2b6
SHA256

eb00e047656e644b4c2f15291fba74900e461a09972c7018a51cd38851cf4942
SHA512

4bb8e17cda062e7b7e72c68ecaa18f2ff607881581ae083fce9171ab27847669b2f4ab54bd509b819b0749b7fd343647eba4535bae5343761deaa7715e62b78f
SSDEEP

12288:Y0h1VPhukqZqncNkHDhOOMDAFWcuoHZPAUdHt:Y0RP0lZuUkyDKuo5P9dHt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ea689c9ebeaed7c816ea8d8afd3314_JaffaCakes118

Files

41ea689c9ebeaed7c816ea8d8afd3314_JaffaCakes118
.exe windows:4 windows x86 arch:x86

98603d8c101c9d46fe71286b026e307b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
CloseHandle
LCMapStringA
GetCurrentProcess
LoadLibraryA
ExitProcess

user32

wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA
SetWindowLongA

advapi32

RegOpenKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueA
RegCreateKeyA
RegEnumKeyA
RegEnumValueA
RegSetValueA
RegDeleteKeyA

Sections

.text
Size: 609KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 140KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ