422aab9a770ad622063cac82ee01610f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

422aab9a770ad622063cac82ee01610f_JaffaCakes118
Size

434KB
MD5

422aab9a770ad622063cac82ee01610f
SHA1

3b0e1acc08385c549515eff783f247ca715510eb
SHA256

33c81c06ffe46569588e8cfe8ea87b76ff7a898ff2b2226f847311489d7eee4b
SHA512

1c5ebee81cf894d1fe81cf3f465905eaed27d5745abf4c8b80b4db7e23a323d6e3a5a1981eb16d3b76d7a1f0bb4358f66c873932194af61d4960517d76b46808
SSDEEP

12288:QWAlnjc/dcqaXBASr5BwY7nPgX3vsbwVvcXeWSHq:QWwjBBAS3N4vncXes

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
422aab9a770ad622063cac82ee01610f_JaffaCakes118

Files

422aab9a770ad622063cac82ee01610f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

93ef1be0aca3dbcc0712ad17461ffb6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
LoadLibraryA
CloseHandle
CreateFileA
LCMapStringA

user32

SetWindowLongA
wsprintfA
CloseWindow
CharLowerBuffA
CreateWindowExA

advapi32

RegCreateKeyA
RegSetValueA
RegCloseKey
RegEnumValueA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegOpenKeyA

Sections

.text
Size: 127KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ