87549d76be99e1992b6ce52252b48eb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87549d76be99e1992b6ce52252b48eb8_JaffaCakes118
Size

160KB
MD5

87549d76be99e1992b6ce52252b48eb8
SHA1

32f221a5bde1f410ce30d4c112ef43f806012743
SHA256

3b282961aaf8b9118dc28d5468566611825f7da862293aa5fb8fa99c965bf8d9
SHA512

70d1d7f4a1b50be1df12bad64d13c1d40e5bf2b11fcd93ee64ab693da42dc4ade7b96aa1b3169cb1c850aa8b64f63b01bfe73071c60fcc1f34de1e2b819da2ac
SSDEEP

3072:qFyiL6Mq3gn3KWrv4vdDnmeU/z3Le56ZIBGl2uUD9nLdVjLrt:qFyilq3g6WDExnePewZ6UUBLdVj/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87549d76be99e1992b6ce52252b48eb8_JaffaCakes118

Files

87549d76be99e1992b6ce52252b48eb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e5c3ec879d673369d3b24d6246750df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
ExitProcess
LCMapStringA
CreateFileA
LoadLibraryA

user32

CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA
CreateWindowExA

advapi32

RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegSetValueA

Sections

.text
Size: 140KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ