4a24d22c4cca6068a05ee4aa48d99c13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a24d22c4cca6068a05ee4aa48d99c13_JaffaCakes118
Size

187KB
MD5

4a24d22c4cca6068a05ee4aa48d99c13
SHA1

e7639c14ff334390f981fcdef410d90a5c4930fc
SHA256

d8d5195fb20e165d88c36189cb008838df72ca5edb4d2f1b4c96456320582f6e
SHA512

889ddd3fe928ea43672d5842835d86172f779f4d598515668c6bf0de3813dc5573e85813afc223ae02beb04246d264e67492820baaa51ce3508b6f4e4e44e39a
SSDEEP

3072:3h8MLPvWRGcY5wGTOuhQsG1hvqnfyt1YIpZNVBzXFh5wNK03r3KaRBNxlsHReM7f:7tuGtk1hvqfytiIzpXz5wNf3bKaxsNf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a24d22c4cca6068a05ee4aa48d99c13_JaffaCakes118

Files

4a24d22c4cca6068a05ee4aa48d99c13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

267edd69f2ca4605be166637fa64f506

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA
ExitProcess

user32

CreateWindowExA
CloseWindow
wsprintfA
CharLowerBuffA
SetWindowLongA

advapi32

RegSetValueA
RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA

Sections

.text
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ