71c727200d4f21a0c1acf077e69ff0ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71c727200d4f21a0c1acf077e69ff0ce_JaffaCakes118
Size

215KB
MD5

71c727200d4f21a0c1acf077e69ff0ce
SHA1

8803c202cc16edeb2c26afe95c26a89c2767232d
SHA256

c9d3155536444a86792546e7b556f8ba2950c37a0898e054faa0b6f8d1193d36
SHA512

9cb95e8290a4f228d28e0569bf7a78e680d3671849f2e167de363f8c68c05255895ee133d365db891406c6c8a9291df3938390aa6fbbd07e38943650e4bf8bb7
SSDEEP

3072:GehE5M/oXBcT7JkjkstZ1uy/Z17mko9C15ldDkW5oFcZeUtDqDgPOWJmK8IL/v:GeOxcx8J5uybal9C15AW3pukPOltCX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71c727200d4f21a0c1acf077e69ff0ce_JaffaCakes118

Files

71c727200d4f21a0c1acf077e69ff0ce_JaffaCakes118
.exe windows:5 windows x86 arch:x86

76be9220dd26acaba374e3aa6ccc1fb1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
LoadLibraryA
GetCurrentProcess
CreateFileA
LCMapStringA

user32

CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA
CloseWindow

advapi32

RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueA
RegEnumValueA
RegCloseKey
RegOpenKeyA
RegDeleteKeyA
RegDeleteValueA

Sections

.text
Size: 4KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ