951d5622b8702bdbceef4a756ec97422_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

951d5622b8702bdbceef4a756ec97422_JaffaCakes118
Size

344KB
MD5

951d5622b8702bdbceef4a756ec97422
SHA1

05c881e81ceb1aa961bc90939a0532def3be72a2
SHA256

b9513e38c78d447b7eae0e8e215f5a3143d60757b934348097c8089c0bafb567
SHA512

63a7cc55acb7cb04dbdf9697bcaf2df44959646632cc1a7aac982d2466f12597e9ece73ba6f22970508d6d8830cfb766d7bb71f4bd55a84be29458b934ed1a42
SSDEEP

6144:+t2INqF+W0NZoZVBGtu+TtvpPwJqk0XayJTESq11Zp0yN90PEF:+q0NWgtuwhUqkIToAy906

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
951d5622b8702bdbceef4a756ec97422_JaffaCakes118

Files

951d5622b8702bdbceef4a756ec97422_JaffaCakes118
.exe windows:6 windows x86 arch:x86

984e0dafc33cada07a34dd5c4cf550e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
LoadLibraryA
CreateFileA
ExitProcess
LCMapStringA

user32

wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegDeleteValueA
RegSetValueA
RegCloseKey
RegEnumValueA
RegEnumKeyA
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA

Sections

.text
Size: 250KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ