42161c26176deae5d99749b039b9a103_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42161c26176deae5d99749b039b9a103_JaffaCakes118
Size

172KB
MD5

42161c26176deae5d99749b039b9a103
SHA1

dc2e74faf95a852b44ac24bacad02bda385e8922
SHA256

47ccc3192947cefc8f0f0975cb01b1dcbb673718d215f35c21699ff4a6d2103f
SHA512

f4d8f979788768a801e7bd50758b5ecbdbcdbe32b231d8162452191455a2a7c57f63be98307f3e42f72c29b8d06047c98f53cce2f8dd8421917b71eaa28de561
SSDEEP

3072:3qM3Ep0DdPDctlFT783FIJ9EH1+LB5KoNOZ/iIfekTnjoGnH31V4O:6qRDdnV0E+LB5cv20nj1nXzd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42161c26176deae5d99749b039b9a103_JaffaCakes118

Files

42161c26176deae5d99749b039b9a103_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ecde5aeed39af3b6f65bd766a8f91e6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CreateFileA
LCMapStringA
ExitProcess
LoadLibraryA
CloseHandle

user32

CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA

advapi32

RegSetValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegEnumValueA
RegCreateKeyA
RegOpenKeyA
RegQueryValueA
RegCloseKey

Sections

.text
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ