a330f78f0cdbf3f498d66730f1f83aa8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a330f78f0cdbf3f498d66730f1f83aa8_JaffaCakes118
Size

168KB
MD5

a330f78f0cdbf3f498d66730f1f83aa8
SHA1

79ca17dd6854ab88463b66523f2e6c64eaef1b87
SHA256

a209f8ec8556a2350824c8ac43c0b9565a2e6a4d60a01a7653deeecee7c1bf41
SHA512

9d2ffb945db6de8c4b7c01ada0f53307246fcae5b46337610ded4c1b43bcca7036ca4dcfe62a56a41b5127ad4bacdc169d70c7f045398def5bd4a4b945907e9a
SSDEEP

3072:wmdGMtT86xHAXDuBRaJhixBOt9hbH8K516DARlU3vRVxWftgb0OUYd:ZZRCJhiah6DAU3v46b0OUYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a330f78f0cdbf3f498d66730f1f83aa8_JaffaCakes118

Files

a330f78f0cdbf3f498d66730f1f83aa8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

653f96b47aa15d5f28733b32e765d52b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
LCMapStringA
CloseHandle
GetCurrentProcess
ExitProcess

user32

CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA

advapi32

RegEnumKeyA
RegEnumValueA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegSetValueA
RegQueryValueA

Sections

.text
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ