4e0db5a138bda6cf8fa2b891883004bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e0db5a138bda6cf8fa2b891883004bf_JaffaCakes118
Size

240KB
MD5

4e0db5a138bda6cf8fa2b891883004bf
SHA1

6667b8609be9534657b62865f7badeb042410067
SHA256

5665db22d93fdf31bf67c963d2018f87a7fdd2b1b59200c95c8deec8740fe500
SHA512

464acf1050d27ee4de80bc9afead444e8f9d079945995cf7d3db83f16ba34aeb43a21f8d8ce3c71b369f3a8591678b82d1882e36b9beaf6c6a73150dd31323ee
SSDEEP

3072:g+Dv4z74jjbD7KM08gpPKtbSIuDG+eWZhsaEaqvsauRJDx+OijOopAp4vvG5YBCd:N9vDyPKVuD/R3+p6rB6OoWphdhIBlC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e0db5a138bda6cf8fa2b891883004bf_JaffaCakes118

Files

4e0db5a138bda6cf8fa2b891883004bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eafa63d84307fa58100db2337004f9e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
LCMapStringA
ExitProcess
CreateFileA
CloseHandle

user32

CreateWindowExA
SetWindowLongA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegSetValueA
RegEnumKeyA
RegCloseKey
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ