4d177e76eba02a22d4a1062b91af7229_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d177e76eba02a22d4a1062b91af7229_JaffaCakes118
Size

285KB
MD5

4d177e76eba02a22d4a1062b91af7229
SHA1

8b9b8524224c84da15d93865e3422ca13ec787d1
SHA256

99add89e842feb2b0a5a4a36cbf1fec66d5b1d370c68a61122fe5f58d0b5c003
SHA512

dc853a406022d6fe02832896b03e7592d4e06a05ddb9ac22224b47b90c64c4ce54d50974e8e973567591fad7a2327a21cc80e55c004f8bac0d5fccd924177522
SSDEEP

6144:v0fiOPUlmFBWgQnDNl+0hqPJAbEz30rofRu1HMFkoV:zOs4zQDhd4uiF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d177e76eba02a22d4a1062b91af7229_JaffaCakes118

Files

4d177e76eba02a22d4a1062b91af7229_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b0553882f1598022e3f4517b2b95e23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
GetCurrentProcess
LoadLibraryA
CreateFileA
LCMapStringA

user32

CreateWindowExA
CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow

advapi32

RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegCloseKey
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumValueA

Sections

.text
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ