69b3470dbbf62d5fe46735e762cb45d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69b3470dbbf62d5fe46735e762cb45d1_JaffaCakes118
Size

524KB
MD5

69b3470dbbf62d5fe46735e762cb45d1
SHA1

312d9b3b0f65aef2e331882daa5d32896e45033b
SHA256

ecdb2398bbf7b43b84b80a9edc8ee0cb685f6b3592802bc709af21c129dbe7e5
SHA512

02d4054ec82696c82db69e3a64efd2de2f1bac3d7668a2a5cbdcb008fe49e209f8386f5cbbabb48f1c8596a15044973aafcfe5ceaf4cb854e8073b4a4eac9a7e
SSDEEP

12288:KzdardqTT0dpPZgaTwbq5OxzsPMMyn9fL8Z9wvKxiS:Kz40TT0PP2aTwbdzsPMXLy3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69b3470dbbf62d5fe46735e762cb45d1_JaffaCakes118

Files

69b3470dbbf62d5fe46735e762cb45d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f35b5196321e5df0bb83117c3bb6434

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
ExitProcess
LoadLibraryA
CloseHandle

user32

SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegEnumKeyA
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA
RegSetValueA
RegOpenKeyA
RegCreateKeyA
RegCloseKey

Sections

.text
Size: 473KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ