6fd7738d4e236e0e9277ce90bfe78c53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fd7738d4e236e0e9277ce90bfe78c53_JaffaCakes118
Size

221KB
MD5

6fd7738d4e236e0e9277ce90bfe78c53
SHA1

05d23b16b1073e164ac5209f41c3d3c0207404f4
SHA256

f610943fc6cdfe9975b38d54ee88069630c641bdcd2ee8886c7ff3a6a2286ff8
SHA512

80dff44e625062689da8d3bfab6b2b2faa67b2ce09492d0be61f1c8976a9b66e5badf6f46cb541a6702b4e5787733069d3c113f3900ff5884247d7b089a24ab8
SSDEEP

6144:FH8xBLxVPW387MlmFs4NP8eK+KJ6oF0QWwXnlnSP:FcbL2M7W4NxN00lwXln6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fd7738d4e236e0e9277ce90bfe78c53_JaffaCakes118

Files

6fd7738d4e236e0e9277ce90bfe78c53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a033b23e8b95dc182cc53c1956e2fb3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CreateFileA
LCMapStringA
LoadLibraryA
CloseHandle
ExitProcess

user32

wsprintfA
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA

advapi32

RegEnumKeyA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegOpenKeyA

Sections

.text
Size: 155KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ