96729a9a2e7b38f7324cb253add937db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96729a9a2e7b38f7324cb253add937db_JaffaCakes118
Size

1.4MB
MD5

96729a9a2e7b38f7324cb253add937db
SHA1

ed3eaeb2c88569ed5697b951901d77e4a267b63e
SHA256

ebd118a2b739601efaf9dc9ab85db69278da7d2a01c3503dc12e622e92aac954
SHA512

1cc95d909ab07466fe00da958eadfd3c39e5f7c236ce19d0df00c6660fc25a99812c3f0a73b385d00b868a7a6d3c62add0807de1bbd630a79546e85a1d27ffe8
SSDEEP

12288:0cpCG9/f4ji01T7Eq+ZKzNdzrSsd2hGjcMKlbomvpDV6ogyU/zkKXf6:3CGJ4/7EqDXe+8bom/6oGd6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96729a9a2e7b38f7324cb253add937db_JaffaCakes118

Files

96729a9a2e7b38f7324cb253add937db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4ad1601a108a372b4bb9dd1d62e0b20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
ExitProcess
LoadLibraryA
CloseHandle

user32

CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA

advapi32

RegCreateKeyA
RegQueryValueA
RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegSetValueA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ