7754873f6e33df368bd58a47101a9a37_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7754873f6e33df368bd58a47101a9a37_JaffaCakes118
Size

584KB
MD5

7754873f6e33df368bd58a47101a9a37
SHA1

2d4ac5bdcc23305d22f8d900baec1bf9c9972251
SHA256

5c47fb833f7e552a432ac83759e4e64513ffe3def91efd4b05e44474766993d6
SHA512

35b31021daf978e13fbce3013bfaaef81531035bc20abfb7ab236b33818d5a0c9d9cb5fd499a9f68ab7f1e6b6445d49c5b6fc9ebcce8ce11fe8543e006f10e66
SSDEEP

12288:viDClB3/HPpwBh2tLVMnMV3ZYgQvnvLvavNe5t:viDClNXghqVMMhegQPvLCE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7754873f6e33df368bd58a47101a9a37_JaffaCakes118

Files

7754873f6e33df368bd58a47101a9a37_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c204d9dd746203b40fc4456b79d8dd3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
GetCurrentProcess
CreateFileA
LoadLibraryA
LCMapStringA

user32

CreateWindowExA
CharLowerBuffA
SetWindowLongA
wsprintfA
CloseWindow

advapi32

RegEnumKeyA
RegCreateKeyA
RegEnumValueA
RegOpenKeyA
RegQueryValueA
RegDeleteValueA
RegSetValueA
RegCloseKey
RegDeleteKeyA

Sections

.text
Size: 539KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ