62eef84947a403d48b23a9fde2c7bd27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62eef84947a403d48b23a9fde2c7bd27_JaffaCakes118
Size

184KB
MD5

62eef84947a403d48b23a9fde2c7bd27
SHA1

a71910d3c94b73178d55a93c5ea72cb778dfa899
SHA256

89abcacd3b31b09390119f173f527cee8bd25e749ff6e48bce0d953a6e3a5143
SHA512

a7f63b14f877fcc5d7e25daa917512af37eb9afa70712acacddc92bb772370dc4157fd4562ad1fe7c00757ef37aedbbdefc199fa762cc7db7acd8d0f0089a18d
SSDEEP

3072:J74e3WvIvbb8+zm2ZagX4BH6bZ0p/3zfWdC3mMPiMyuwz5G1H+dnVmZfYu:tWvIDb852MgXoH61er+4bxwUacZwu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62eef84947a403d48b23a9fde2c7bd27_JaffaCakes118

Files

62eef84947a403d48b23a9fde2c7bd27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c3d86e479e57f9e762aead3afa095457

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
ExitProcess
GetCurrentProcess
CreateFileA
CloseHandle
LCMapStringA

user32

CreateWindowExA
CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA

advapi32

RegEnumKeyA
RegCreateKeyA
RegCloseKey
RegSetValueA
RegQueryValueA
RegEnumValueA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 157KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ