a73883222a7b3dba5c425151b4894cf9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a73883222a7b3dba5c425151b4894cf9_JaffaCakes118
Size

184KB
MD5

a73883222a7b3dba5c425151b4894cf9
SHA1

82329f5f9f2c62c9775f1a4b7a084f7626b7f8a8
SHA256

14126792074a292c544d072bfc5eda969095ffd9e5213dab29efcc3ece701f43
SHA512

225d96a7a89b3d0764b44b53a708f243b8a6056e0e5933dcb09e8817bc56906bdae55d2b2ee63b599d98d0645d0bc28d7103252e1490d7c7f0ec1a1b87553a18
SSDEEP

3072:wwF9KbrPeAb3phDDjn40lpLSYxvfQJVjmKE0vg/6r6raQTR+SGItBkbjx:dF9wrmAbp5D74gpLSYqxmKA3j+LeBk3x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a73883222a7b3dba5c425151b4894cf9_JaffaCakes118

Files

a73883222a7b3dba5c425151b4894cf9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6413fc616335bedd99d2f7d65be1562

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
LoadLibraryA
LCMapStringA
GetCurrentProcess
CloseHandle

user32

CharLowerBuffA
wsprintfA
CloseWindow
SetWindowLongA
CreateWindowExA

advapi32

RegDeleteValueA
RegEnumKeyA
RegCloseKey
RegSetValueA
RegEnumValueA
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA

Sections

.text
Size: 167KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ