656455292451698bc2de126afdea386b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

656455292451698bc2de126afdea386b_JaffaCakes118
Size

189KB
MD5

656455292451698bc2de126afdea386b
SHA1

27b9b95fc10d272fa855f5c3401bd438ba7549f4
SHA256

bf6c1312ed0745a8c433f98551bf02ff99d0cc058dfb7fdcdd65a160dd63e40c
SHA512

556c42b5de18318af7140d074a5a687c0ec9d473f67ee54aef9bb6adb1b032009495b4ffbcb69313874d202e01cfdc72b76e3b923a40c29010fc68ff42d85514
SSDEEP

3072:ANAVpTCcH2SsXFLgNeZdozGfrQ+9KtfWeAxSXS++1kz5sODL:fVp2cWSsV8+dzfrDotf9AxSXSBcl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
656455292451698bc2de126afdea386b_JaffaCakes118

Files

656455292451698bc2de126afdea386b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc66440510b4d72c93bd24879a913a1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
ExitProcess
CloseHandle
LCMapStringA
LoadLibraryA
GetCurrentProcess

user32

CloseWindow
CreateWindowExA
CharLowerBuffA
SetWindowLongA
wsprintfA

advapi32

RegDeleteValueA
RegQueryValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegEnumValueA

Sections

.text
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ