460126e1bb3abbc7a9182cc4b8dc17d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

460126e1bb3abbc7a9182cc4b8dc17d7_JaffaCakes118
Size

416KB
MD5

460126e1bb3abbc7a9182cc4b8dc17d7
SHA1

56a6855d0b18a1b47985e0329f1fb6039db1f3ec
SHA256

8b469d017695ec78e7508cc7c7dd389397b52d1c815103527935d086c77131e5
SHA512

c43e1cdbd730dcdad0022e14bed0acaadd71d72663b8797ad549b1462962386ab67027ff33c0617616c16ba190fb769ee16b6fc550657897892a2ef0b354786b
SSDEEP

6144:n/qdPyxMsshxme6+sLW88Nk8o9ing8qj6OMhUDmQGiFlNcyJEBY2OAT8cKu8ij2:1WLxmepZuigb+O64mjiFlCMEBY278cIL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460126e1bb3abbc7a9182cc4b8dc17d7_JaffaCakes118

Files

460126e1bb3abbc7a9182cc4b8dc17d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

152a7ab0346d001b4c3c975e6561014f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
ExitProcess
GetCurrentProcess
CreateFileA
LCMapStringA

user32

SetWindowLongA
CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA

advapi32

RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegEnumKeyA
RegCloseKey
RegQueryValueA
RegCreateKeyA
RegDeleteKeyA
RegSetValueA

Sections

.text
Size: 395KB - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ