87fa8c6ccfa05b7e038bc766fb58c8cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87fa8c6ccfa05b7e038bc766fb58c8cc_JaffaCakes118
Size

1.5MB
MD5

87fa8c6ccfa05b7e038bc766fb58c8cc
SHA1

5e58f5de069bede45090cfc9c1bfd283b793cf44
SHA256

e2ab3c47b3d8df49a735a764cf95a0c57bb7c7ea904e9daa177c2b546cc9ac3c
SHA512

4de15fc3b81972768f02affb45bd8232b947437f432cb1ca00b786712d054bbbf20d8a0a64d7790c00a28d556b3977e539047e599a234d87aae80761cad1841d
SSDEEP

49152:wBwRj98F7eG67XPl+M++ZvbRuYEfJHPby:W88oGYPMaVuYepm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87fa8c6ccfa05b7e038bc766fb58c8cc_JaffaCakes118

Files

87fa8c6ccfa05b7e038bc766fb58c8cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6de796064bba2c5556e8fb8b7234f3f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
LoadLibraryA
LCMapStringA
GetCurrentProcess
CloseHandle

user32

SetWindowLongA
wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueA
RegOpenKeyA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegEnumValueA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ