44139bfb631319768c26cb0f82836693_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44139bfb631319768c26cb0f82836693_JaffaCakes118
Size

149KB
MD5

44139bfb631319768c26cb0f82836693
SHA1

f83a3b8a944b0d4eceec0c85848a0d5b1ade4734
SHA256

0ba3eee291527e61a39b001c2da87f3f4966e63d213ff53265fcafd906750b1e
SHA512

20e8c9709cbf940dfc8fbcf4c4d9feb03bed7068cffaafb3ec0a96c84997aad57566cf4c2239df0babe0f08a4264870b20433a0e6e6bc993147a3b4c2dce8dc4
SSDEEP

3072:VBD+o9HN7C1VMqGS+QWQiBEOz2yUyhFLSzYIqHjc9qah:Vb9HN7zz3QWB2TyvUbqHjc9qah

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44139bfb631319768c26cb0f82836693_JaffaCakes118

Files

44139bfb631319768c26cb0f82836693_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ea970da12794be7035d6aedbcbbcc9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
GetCurrentProcess
CloseHandle
CreateFileA
ExitProcess

user32

CharLowerBuffA
CreateWindowExA
wsprintfA
CloseWindow
SetWindowLongA

advapi32

RegCreateKeyA
RegDeleteValueA
RegSetValueA
RegOpenKeyA
RegQueryValueA
RegEnumValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey

Sections

.text
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ