62fdc1e5dab46aa40525d75d143d97da_JaffaCakes118 | Triage

Sharing

General

Target

62fdc1e5dab46aa40525d75d143d97da_JaffaCakes118
Size

177KB
MD5

62fdc1e5dab46aa40525d75d143d97da
SHA1

e848a9105fea9a63024a851c1b4e04bbb80aa6a0
SHA256

e4ba78fada210f1f50f94f9af1eafbbbe037c7158644eb7393ef10ca90638a88
SHA512

1545211f2b8df599c1f482a8268cb2a53c05813ab4014c82e2bd811df6fbffe63b74b44ba3ca7fa59437b6d36fa5e5a6d47eceaf8abf08b857059172d20240a3
SSDEEP

3072:qxmrzI987u4ef5yWQXgCbpnosSHvR/D2hhrXHfzQS95l5V3NqDXXLMu7E5:qxt877O5yWG5pnZ623r95fV3E3/Q5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62fdc1e5dab46aa40525d75d143d97da_JaffaCakes118

Files

62fdc1e5dab46aa40525d75d143d97da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

428eb54c36551eddd32c71f53a00b9f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
LoadLibraryA
CloseHandle
ExitProcess

user32

CreateWindowExA
CloseWindow
wsprintfA
CharLowerBuffA
SetWindowLongA

advapi32

RegDeleteKeyA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegSetValueA
RegEnumValueA
RegCreateKeyA
RegEnumKeyA
RegDeleteValueA

Sections

.text
Size: 157KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ