67f8525c294d37647b3810308fdedd87_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67f8525c294d37647b3810308fdedd87_JaffaCakes118
Size

208KB
MD5

67f8525c294d37647b3810308fdedd87
SHA1

32deb9657d1b0909e707c9828d89d878d2c5c4bf
SHA256

d005f91d6d8074d3db924872b7a50c4ce35a49a71c067b51a620088f5094b89f
SHA512

b5a6099bcbb88ea09a6704a92a26b9120ee909f68ea90338bc37283657491130868c8ed58a1cca23acc213ef1758e82ba712c56df274a8cd0ebef64e14577740
SSDEEP

3072:VWxBpANJcYO5X04H2hGxaDWWLTqygZ/GH9xhv8xYSZLPslO0TaxINpgZfYh:aOJfckeJaDUK9xhv8xYyklFaxIIZwh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67f8525c294d37647b3810308fdedd87_JaffaCakes118

Files

67f8525c294d37647b3810308fdedd87_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f4cf919bfd356b320cc0a7a67e43d045

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
CloseHandle
ExitProcess
GetCurrentProcess
CreateFileA

user32

CharLowerBuffA
wsprintfA
CloseWindow
SetWindowLongA
CreateWindowExA

advapi32

RegSetValueA
RegDeleteValueA
RegCloseKey
RegEnumValueA
RegQueryValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA

Sections

.text
Size: 164KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ