86216895298699ef69acd45b5a4c513a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86216895298699ef69acd45b5a4c513a_JaffaCakes118
Size

204KB
MD5

86216895298699ef69acd45b5a4c513a
SHA1

87bc51de1492fc1abf107f2feafa45829e9269da
SHA256

9335be0a9e70ae6d7e180664b33a4da01d2a1b09d82135325d427a8126ad9715
SHA512

0de39fc2d27f14b1cdbff23d5b9e31db4c598f884e88d9e2d9b5f854e074678f6367688431784e157e7c5a9f01e507b814c04410331aeaf3e1b08e46a858b22d
SSDEEP

3072:mWpP2fda2ri6WZ1K8let9Xucd+CYq7uO60rDd+BLIbk3Gvlzo7EQb:nmdne5fKXy9CYq20l/byklUQS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86216895298699ef69acd45b5a4c513a_JaffaCakes118

Files

86216895298699ef69acd45b5a4c513a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

35b038bfcd80d8014c4117c69dc982be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
CloseHandle
ExitProcess
LCMapStringA
CreateFileA

user32

SetWindowLongA
CreateWindowExA
wsprintfA
CloseWindow
CharLowerBuffA

advapi32

RegCreateKeyA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegEnumValueA
RegEnumKeyA

Sections

.text
Size: 177KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ