4767a5b21dfc056ad7626c978ff40c5c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4767a5b21dfc056ad7626c978ff40c5c_JaffaCakes118
Size

213KB
MD5

4767a5b21dfc056ad7626c978ff40c5c
SHA1

0a10309ad9ed6242dd40600a0b122dd355c286f4
SHA256

273fc747d39f0e54dfdd51db2eea7d12d6de8bfb522180e56fccaf7425ebcd2d
SHA512

a8f9c02620c1514ead326798d7ad869b3a0ca16bec466587de0b3f35117a9160df925fe8ff5b0ff0fe3f19cce2122130829ca563b058cd542f607e052a16e2f9
SSDEEP

6144:h/kwW2iFYXoVY40oaU1ew07BHa41COFOvcPcGndgNUYs:7WLqXoe4lHgwawtGgs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4767a5b21dfc056ad7626c978ff40c5c_JaffaCakes118

Files

4767a5b21dfc056ad7626c978ff40c5c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ceeb9808b16aea555cd5b48cf978ddd3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
LoadLibraryA
CloseHandle
GetCurrentProcess
LCMapStringA

user32

SetWindowLongA
wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegEnumKeyA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegEnumValueA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
RegSetValueA

Sections

.text
Size: 162KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ