95f407b4a6809b34b0d1a291097099da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95f407b4a6809b34b0d1a291097099da_JaffaCakes118
Size

364KB
MD5

95f407b4a6809b34b0d1a291097099da
SHA1

d96eb1cfda147cd21387eb52b0bd9245b814fd2b
SHA256

ab1560b3a7cfbd0d9fac2a0c1a91999ea99286575a0571bd83b5b7d0ebe1ef94
SHA512

847d6c302359b7e242070e8b57bbce655743be31c92869f0554c0b2f9374cb8117eb106dfe381677a582d1fd830f3d6598279fb901b01cabc0e86db20b62e8fb
SSDEEP

6144:FcGZAS3tfoPPbWrWeh4VIu0Xp8upNqQlmirspIpuxOzYHh:6GZAetQPTiWfQpNt+pIpuxOM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95f407b4a6809b34b0d1a291097099da_JaffaCakes118

Files

95f407b4a6809b34b0d1a291097099da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c13c2abe5ad22212c56a148cd5b967f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess

user32

wsprintfA
SetWindowLongA
CloseWindow
CharLowerBuffA
CreateWindowExA

advapi32

RegDeleteKeyA
RegSetValueA
RegQueryValueA
RegCreateKeyA
RegDeleteValueA
RegCloseKey
RegEnumValueA
RegEnumKeyA
RegOpenKeyA

Sections

.text
Size: 344KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ