8731c2b4535a5852deba6de97da4ab61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8731c2b4535a5852deba6de97da4ab61_JaffaCakes118
Size

168KB
MD5

8731c2b4535a5852deba6de97da4ab61
SHA1

1d2defff6ab7fdea20e51fe0d705cceba506dff0
SHA256

7f58dd491294c8dd5a7c106fc45ca36942540b61dc0aeea90c9817eb38b443a4
SHA512

c13b91514e9b8fa9eb052b26eb732c8ab3b869b61be3997f50b9746978c90fdf90f00125d01a0a5460562dd458abf27b6e2931260d1b850ac8864e3f707c3948
SSDEEP

3072:vfOof2wFKqmLtuYojvWvUr6T6f9yDhroYpaZG51u:vfhfHKHuYoj0Mo6fAD2eaE51u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8731c2b4535a5852deba6de97da4ab61_JaffaCakes118

Files

8731c2b4535a5852deba6de97da4ab61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b18e868f806430bb8dfe4dcc0e666603

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
LoadLibraryA
CreateFileA
CloseHandle
LCMapStringA

user32

CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow
CreateWindowExA

advapi32

RegDeleteValueA
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegCreateKeyA
RegEnumValueA
RegDeleteKeyA
RegQueryValueA

Sections

.text
Size: 150KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ