70193378b3408e2fbc48f95141b58549_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70193378b3408e2fbc48f95141b58549_JaffaCakes118
Size

168KB
MD5

70193378b3408e2fbc48f95141b58549
SHA1

387f812a117ebe59f78877c9d42fb68cd3fae47a
SHA256

5229a5503cbe11d8379f00e083ea4e38120b5f9d83eac9c3d686a7415cae7e72
SHA512

bdd5884cacc8754e94f97a7ca951cd71afed8475233ccabf69fbd8d6c776173efc49d08116e7c717feb7809b4b22fad82cff2b043f12aa8eb47bec1c9cefbc45
SSDEEP

3072:21Io+2WTnMPZr5XZXHmv7499XV6wJmgVhAeEZl6LRd1/RgAbYE+o/BKBdbF:2enMbX19F6wwWhzEZlM1/RgAb79JKBVF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70193378b3408e2fbc48f95141b58549_JaffaCakes118

Files

70193378b3408e2fbc48f95141b58549_JaffaCakes118
.exe windows:4 windows x86 arch:x86

690ed873e6d4735a0daf4f2eb0cb8b79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
ExitProcess
CloseHandle
GetCurrentProcess
LCMapStringA

user32

SetWindowLongA
CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegEnumValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ