a1e2eb437aee6c04c5dd7d0aa4689a17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1e2eb437aee6c04c5dd7d0aa4689a17_JaffaCakes118
Size

160KB
MD5

a1e2eb437aee6c04c5dd7d0aa4689a17
SHA1

23ea50e105f0fa09c996a8fca43c25d4c3336ce7
SHA256

685cef130472dd0d939c7ffd5b4741fe029fa0614ac836fad627ba87a9351c14
SHA512

08c000818135edf69ba32b4663b883bec76799a3e7ac2c0c9b135faf6a36f876535f662f882d10ab9df68fbb8e1710ee7ec0d06d21af001625d17883868a41e3
SSDEEP

3072:09n+zLWpu0cN5PqMb7xdsONzaPZ3vlTrM2TL6vkvz8jFV4sG28VIR:ZCz45zbdjzk9TrM2TLJ8f1j86R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1e2eb437aee6c04c5dd7d0aa4689a17_JaffaCakes118

Files

a1e2eb437aee6c04c5dd7d0aa4689a17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5eee0b8d9d071c947cd0a53892a456d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
CreateFileA
CloseHandle
GetCurrentProcess
ExitProcess

user32

wsprintfA
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA

advapi32

RegDeleteValueA
RegEnumValueA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyA
RegSetValueA
RegQueryValueA
RegCloseKey

Sections

.text
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ