a239507549b63b6c06532ee2a2939061_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a239507549b63b6c06532ee2a2939061_JaffaCakes118
Size

676KB
MD5

a239507549b63b6c06532ee2a2939061
SHA1

33ef22a3c12aa4a4d5aed6cf3d7f003667c22719
SHA256

7ee07c1d22efa8b027c1b2c6d4eab35c284a76ec3953799decc05ea2b4e9d194
SHA512

5551737b41f8bf715ed324d49330f534074be511c5e90dabe650290d0f7348585a5a52caefde3a02e694cc4e34f48965fb3cbd41a0f9a4baafd11baa3fe3e669
SSDEEP

12288:iScDfUPyjWjdpYPqre/Um+LQmKG2z9/OZOW4HFAPFdj12TTUnjkXIDmLNzTQMs0I:M3scqO+WUT4yFWTTqjqIKL1Hs0I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a239507549b63b6c06532ee2a2939061_JaffaCakes118

Files

a239507549b63b6c06532ee2a2939061_JaffaCakes118
.exe windows:4 windows x86 arch:x86

afb552ae006a3717c3059ed4ab084d50

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
CloseHandle
LCMapStringA
ExitProcess
LoadLibraryA
GetCurrentProcess

user32

CreateWindowExA
SetWindowLongA
wsprintfA
CloseWindow
CharLowerBuffA

advapi32

RegOpenKeyA
RegCloseKey
RegDeleteValueA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegSetValueA
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 653KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 356KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ