68614224a31f446438723e5237fc8c64_JaffaCakes118 | Triage

Sharing

General

Target

68614224a31f446438723e5237fc8c64_JaffaCakes118
Size

944KB
MD5

68614224a31f446438723e5237fc8c64
SHA1

43a6c989f01a1bd1f36e62e717331f665d74453d
SHA256

97a8962d85342f4ecec4a3e2c4941bb2283bb34de682934a507b45468509f135
SHA512

338fd3c76413bcb33c7106f31449d32051dbe67c020a31e14398c68bf7f74bdd0be312579433314129f18d54ee5b16b9931221824e109d882ba9191ead072c32
SSDEEP

24576:sfDQ0KSkpi59HHDUMRu51is2p0J3vGdDtph1W/fFH0OjGI+H:sLQ0jkpyHuQ50JKZ1WBxm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68614224a31f446438723e5237fc8c64_JaffaCakes118

Files

68614224a31f446438723e5237fc8c64_JaffaCakes118
.exe windows:5 windows x86 arch:x86

498cf7d13ce6296f2755f26b717454da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
ExitProcess
GetCurrentProcess
CreateFileA
LCMapStringA

user32

SetWindowLongA
CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA

advapi32

RegDeleteValueA
RegCreateKeyA
RegCloseKey
RegSetValueA
RegQueryValueA
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA

Sections

.text
Size: 900KB - Virtual size: 904KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 684KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ