87ef349c3f0a11b777c24d49fefa2d62_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87ef349c3f0a11b777c24d49fefa2d62_JaffaCakes118
Size

652KB
MD5

87ef349c3f0a11b777c24d49fefa2d62
SHA1

238c7155c9c08c6aae8a890d49853d58832c757b
SHA256

253ebed98fcfcf27d3bd055ab3fa881d8dbc92bc2f29b4370dd51da1e5f3c92f
SHA512

832626a97cd17a3c8a5fed697560d508bd25d41fafd7fe9f23628ebdc693ab3ac88e0de82772c2a3a95abaecce6460ba7913c7d4b2c821eb7708e26996d6a5bb
SSDEEP

12288:iN5L6QGsWy1SvfwszMb0WSMkrzkZPFrEe6EVWQIUZG0:C5PG0g3wFb0WSxrSPF6IeUZG0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87ef349c3f0a11b777c24d49fefa2d62_JaffaCakes118

Files

87ef349c3f0a11b777c24d49fefa2d62_JaffaCakes118
.exe windows:4 windows x86 arch:x86

372b818ab99d4818939efd843d591db8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
CloseHandle
LoadLibraryA
CreateFileA
LCMapStringA

user32

wsprintfA
CloseWindow
CreateWindowExA
SetWindowLongA
CharLowerBuffA

advapi32

RegEnumKeyA
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegCloseKey
RegEnumValueA
RegSetValueA

Sections

.text
Size: 630KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 140KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ