47adb01cd30a3c7017b3861ad19c3a8c_JaffaCakes118 | Triage

Sharing

General

Target

47adb01cd30a3c7017b3861ad19c3a8c_JaffaCakes118
Size

242KB
MD5

47adb01cd30a3c7017b3861ad19c3a8c
SHA1

8edf8565c5e96d89cff0f9a503de3d9cba96a730
SHA256

bfbd3281df1453685bbdf5c248b28eb0ced19e903f99fa86eba3fe7685fdad7e
SHA512

a88209cce38447f729a42d6148ffb64c14a9c91c8f6cbe0b5a41ffd4f217828cf2ee5021e6820a8f046d725400649892cd0961863a1490b3018a10f13ad9e304
SSDEEP

6144:6ticHNpP5PfokFwwvjvUIKVGQfFhZwqpFm:8iqnMwxKDLu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47adb01cd30a3c7017b3861ad19c3a8c_JaffaCakes118

Files

47adb01cd30a3c7017b3861ad19c3a8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c769614cc5ba8edc61b0a0e3c44946b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
CloseHandle
ExitProcess
LCMapStringA
LoadLibraryA

user32

CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA
wsprintfA

advapi32

RegCloseKey
RegQueryValueA
RegEnumKeyA
RegCreateKeyA
RegEnumValueA
RegSetValueA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA

Sections

.text
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ