8426607332c165def3aafefde7fd3efc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8426607332c165def3aafefde7fd3efc_JaffaCakes118
Size

408KB
MD5

8426607332c165def3aafefde7fd3efc
SHA1

b09b0ae97cb4704017e232a5cbb6baf7028dcebb
SHA256

b83a6de5dd99f615daf3a5feb33189de5819bcbc60f7d59584b104f54912c10d
SHA512

8d2df035755a5d170f6ffb6be5db6c4f61f62abd93fbc6b07b47d4c3364a6d574f96a250075319334ec569ce135fea600effeb5c99add7e9b706edc8d659bd4d
SSDEEP

6144:CiM59fy9i8zq4hMFz0MmmD0EA3fIgwMazBSSU+uFt9oiZEJi/g/Kzcqr9sUQnBL:CnfwK4hMFz9miqbalLU+ilZWIEMKUAL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8426607332c165def3aafefde7fd3efc_JaffaCakes118

Files

8426607332c165def3aafefde7fd3efc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

94a66a4c62a8a2087625545f0d1003e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
CloseHandle
CreateFileA
LCMapStringA
ExitProcess

user32

wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow
SetWindowLongA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegEnumValueA
RegSetValueA
RegQueryValueA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 390KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ