664267720cee7d92e31271607659e223_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

664267720cee7d92e31271607659e223_JaffaCakes118
Size

185KB
MD5

664267720cee7d92e31271607659e223
SHA1

b928982e0f719ec0db93eb9bb03bbd3873cf8c3b
SHA256

1e4a57eaf8e38d88ca1b2eaf210233b0c892641683c142c27291eb6a4b3220dc
SHA512

3dc3b68699f2b70f8ab32a3ff2c1816321a1996f236bcdfaa34e4438e6fb36ab350cc9fdda36074ec12159951ea22dc0fb612eee2ac0d4afc7a25e4e8f79bf59
SSDEEP

3072:cilZ9DQ00IR2E78AqQwXmMdUhc5yXi5Wff1QqaSfzuODul7:d/aO78kwXzUsOi5hqaSfqV7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
664267720cee7d92e31271607659e223_JaffaCakes118

Files

664267720cee7d92e31271607659e223_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8478675b9bfb78c96f7dd41a68d63c4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
CreateFileA
LCMapStringA
LoadLibraryA
CloseHandle

user32

wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow
SetWindowLongA

advapi32

RegEnumValueA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA

Sections

.text
Size: 141KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ