68d2e904bddeb52df2bb80b9c84c61ae_JaffaCakes118 | Triage

Sharing

General

Target

68d2e904bddeb52df2bb80b9c84c61ae_JaffaCakes118
Size

160KB
MD5

68d2e904bddeb52df2bb80b9c84c61ae
SHA1

626ba6003547e9ee1b9c90e47c677ac175641bc8
SHA256

4cecd371ded81f808c272c8379bb4462cfaa1e38689cc1cba8ce7e688e74cbed
SHA512

5ecea0829f2019dc10e231e61cd39ab2616f77d16141b7d727d399dfaa57c5753a571d67f625f7fae43fd143a310cacb9a9124f82fcfbb3876a33c260f81765f
SSDEEP

3072:P/KDNl5R+f9j0pPYBj6lbdRPIQLyqTf4AJ2nOdK+P1ZjCr:P/KpgQRM0QpqTfvJ2GK+P1w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68d2e904bddeb52df2bb80b9c84c61ae_JaffaCakes118

Files

68d2e904bddeb52df2bb80b9c84c61ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ca22e53aa39595a1a432d58fae12249

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
LoadLibraryA
GetCurrentProcess
CreateFileA
LCMapStringA

user32

CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow
CreateWindowExA

advapi32

RegQueryValueA
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegEnumValueA

Sections

.text
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ