46493a89d5335f12478f9d071916c2ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46493a89d5335f12478f9d071916c2ae_JaffaCakes118
Size

480KB
MD5

46493a89d5335f12478f9d071916c2ae
SHA1

a71de703345d4a56f9eaad03925f9058a4a04669
SHA256

0f03af67db3130a4129771eb332dd52c4864166d8ed3b9b0aca73d3c1fff566d
SHA512

34d574b3cd1e77bf2f10e30594fbbc9e59973609372f904f19c7d82f58890e8bb0e13ce8fc2ac33eff28f03a41a37534208d8af365aec6ca01bb66bea69dfa9c
SSDEEP

12288:DqxKMybXy8D+H28eWEUkQxx8M2qwng6HvhGCJL5tU:DqxR8D+H2czxilqqgMvhXNtU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46493a89d5335f12478f9d071916c2ae_JaffaCakes118

Files

46493a89d5335f12478f9d071916c2ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0867ce98f95581ad6275e183748fcac4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
GetCurrentProcess
LoadLibraryA
CreateFileA
LCMapStringA

user32

wsprintfA
CloseWindow
CreateWindowExA
SetWindowLongA
CharLowerBuffA

advapi32

RegCreateKeyA
RegOpenKeyA
RegDeleteValueA
RegEnumValueA
RegCloseKey
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegSetValueA

Sections

.text
Size: 4KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ