9425a7f51dfbdfc30680fb4e22ba35c9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9425a7f51dfbdfc30680fb4e22ba35c9_JaffaCakes118
Size

200KB
MD5

9425a7f51dfbdfc30680fb4e22ba35c9
SHA1

7d3ffbab3fd530bca8f5e1cd213e0a275909f780
SHA256

2422f858072edaf6687ad9f1b41646dde6b3c747e602e4c38ff920e4af7f07f5
SHA512

20690475250449bc254622d98e98b56b6d35c5e2b871075fa2312d0fadb755957e33258e87fe79565a8dbd76ea5fad6c8636fff5472df88b77b44932ca73b276
SSDEEP

3072:xw6BXlvBD3fbpJHLFiZoiGk4/mClBA7ndBTRr57X7gfNE+wNdd57tj2EQzF:xxVxDLr8SUQ5BAxB9tkfNE+wLd5pyEu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9425a7f51dfbdfc30680fb4e22ba35c9_JaffaCakes118

Files

9425a7f51dfbdfc30680fb4e22ba35c9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a3295b89cca1481e624e91a6f90ec555

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA

user32

wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow
SetWindowLongA

advapi32

RegEnumValueA
RegQueryValueA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegSetValueA
RegEnumKeyA
RegDeleteValueA
RegCloseKey

Sections

.text
Size: 176KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ