81de11f7347c4cc21c247358ebb9d9d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81de11f7347c4cc21c247358ebb9d9d1_JaffaCakes118
Size

206KB
MD5

81de11f7347c4cc21c247358ebb9d9d1
SHA1

3a75c396bdf775439684cc91911f7fd548008401
SHA256

4b9bb6cd30e3d6f798c7e36f47af873d9c32464f2503cd8fea6c8b12534ee2d2
SHA512

325ccd5b3648d1d820152600f1326d20bdf01056b3aa99a6500a4687679d42ca1f1790d55816d819e6ad55a013b1c137ea9c443882becbeec489ecc87b4e95ed
SSDEEP

3072:sywPox+v9zlFfuMvCze66HjpvN8s/ho2hfVc+a89u4I4PzKWPGWBKjBfGB0h:aPouT2wCSNduUVn99uF4PeKfKjBfGmh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81de11f7347c4cc21c247358ebb9d9d1_JaffaCakes118

Files

81de11f7347c4cc21c247358ebb9d9d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee0a39ef7dbbb11c0d02f5cc9fe6d288

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
CloseHandle
ExitProcess
GetCurrentProcess
LCMapStringA

user32

SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegOpenKeyA
RegSetValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegEnumValueA

Sections

.text
Size: 159KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ