941445584a56a37b90d94f1c788d76f9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

941445584a56a37b90d94f1c788d76f9_JaffaCakes118
Size

1.6MB
MD5

941445584a56a37b90d94f1c788d76f9
SHA1

8b1f501edf1082d9b68c3eb32e95a1837c02a0fa
SHA256

b9b37c9e0569cc65413424adc6eb08e0c26e6f9173ee4cb5ac8fb8df023f81ac
SHA512

b281e1030eb9557cf9dc6a89dacb45ebd53aff3705961921b932156201b1839c6a63bf241b8eb8ff3a392b0e54e9172f7ada897d8531aa765a2900a2d97b44f5
SSDEEP

24576:dEz/2uCHqQbp3eXxGX/M2qz4fgX8aC8rn9PDtN9zt:dES9SQza48kgxVt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
941445584a56a37b90d94f1c788d76f9_JaffaCakes118

Files

941445584a56a37b90d94f1c788d76f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cbea0bf725428f9ee503cc5608aa641f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
LCMapStringA
ExitProcess
LoadLibraryA
CreateFileA

user32

SetWindowLongA
CharLowerBuffA
CreateWindowExA
CloseWindow
wsprintfA

advapi32

RegEnumValueA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegSetValueA
RegCloseKey

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ