72281fa9d5ff784abb12f5603cb37b2d_JaffaCakes118 | Triage

Sharing

General

Target

72281fa9d5ff784abb12f5603cb37b2d_JaffaCakes118
Size

404KB
MD5

72281fa9d5ff784abb12f5603cb37b2d
SHA1

4114ea395612d8b35bde59dafa628fa3167f9e62
SHA256

0d281a0ec1763181c803d50a70c4b8c7bd69ba8af0945e9e1327cf895531638b
SHA512

5cc5504403652c1250867a07dd8dfccb2502bad3f9d6d2064e9de01b9c7e5c9b98852134fef5592fc454e79e3dc481cd3d82811fe6aad770c0eb036c777c610d
SSDEEP

6144:IupJXsbnHWec6k6psxWrKVINpeZhKg47es/Jz+bOmez0FEjqQh+CKu9rCo3Lo8UI:JpJXyHM6fswNZ7J+bOmnFPdhyrFOfg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72281fa9d5ff784abb12f5603cb37b2d_JaffaCakes118

Files

72281fa9d5ff784abb12f5603cb37b2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdb2aa57b243bb604a0a975188df0a86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
LoadLibraryA
CloseHandle
ExitProcess

user32

CreateWindowExA
CloseWindow
SetWindowLongA
CharLowerBuffA
wsprintfA

advapi32

RegDeleteValueA
RegDeleteKeyA
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 380KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ