71f3d3a8582e545ab455015d7508f9d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71f3d3a8582e545ab455015d7508f9d8_JaffaCakes118
Size

208KB
MD5

71f3d3a8582e545ab455015d7508f9d8
SHA1

c5a4a85b69ff734bbfd9703433379765d80119a1
SHA256

4843f3f124f0e422fa3f9a21b6a8078bba83ea6e6f742a84ecac18a1a375fbf1
SHA512

c835285ea3a96b38306aa5fde04fa1cf0e96c2b4318e0e4a3e9320cd0eb3845ff7485861d32c2c55f1e980d51425f6f50fcf6672d97ef70921f0a5b32289a4aa
SSDEEP

3072:Ndyh9zZNN52MnxQHBkpOHY67Lgiip/f2cmo0n9EsSiARGrd:Ns9zjNrxBpOHo/fKTn9EsRARYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71f3d3a8582e545ab455015d7508f9d8_JaffaCakes118

Files

71f3d3a8582e545ab455015d7508f9d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fc4f447b9db9813575a7a6fd4d33805

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
LCMapStringA
LoadLibraryA
CreateFileA
CloseHandle

user32

wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA
SetWindowLongA

advapi32

RegEnumValueA
RegCloseKey
RegQueryValueA
RegOpenKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegEnumKeyA

Sections

.text
Size: 159KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE