66acddcd512cd57a0c19857e9d2c226f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66acddcd512cd57a0c19857e9d2c226f_JaffaCakes118
Size

155KB
MD5

66acddcd512cd57a0c19857e9d2c226f
SHA1

4e28f5ee98abf3c077c330acd9c43dfb79be423e
SHA256

9dfa9acca03134b09cb7da168e57195824b3fb926f5b5e640b3dc297bd407b32
SHA512

10d98770b8b84c4f1c3e5024018b438a5ddfa2d20ff5a1575d6a22795ea14837447663df02359626eab3e4c23f01827c8c4efa8b81503b394e5d9b18430cb0ec
SSDEEP

3072:S027dsUT0BQ1N9XmRHaF2cuN8MnlwaJ9rvpCNZrG07S31Xy:S0Ks206fNmBaEeMaaPvmZS07Ay

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66acddcd512cd57a0c19857e9d2c226f_JaffaCakes118

Files

66acddcd512cd57a0c19857e9d2c226f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

01fed4f7c94b053f63285b4b241d9565

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
GetCurrentProcess
CloseHandle
LoadLibraryA
LCMapStringA

user32

CloseWindow
CharLowerBuffA
CreateWindowExA
wsprintfA
SetWindowLongA

advapi32

RegOpenKeyA
RegEnumValueA
RegSetValueA
RegQueryValueA
RegCreateKeyA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegEnumKeyA

Sections

.text
Size: 128KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ