a9fa8b33e80d8a9105fc3cefade3d6ab_JaffaCakes118 | Triage

Sharing

General

Target

a9fa8b33e80d8a9105fc3cefade3d6ab_JaffaCakes118
Size

178KB
MD5

a9fa8b33e80d8a9105fc3cefade3d6ab
SHA1

48b5ee6d811c1c580500cdd535f8acd87ddb1ae8
SHA256

bf82bb193b18171799c0f21fe1d3499d828296be3688f9c255e6b2e919139197
SHA512

31e3d98b2b65e0138113f09a0da26a5048bda8573799fc9e74e25756aa9f58b5f18ab55321b061e45996a4bf95d1046e1a44395b0be9281ffc946a6d10b41fe9
SSDEEP

3072:0fQQ0Bi3/LdiGOrQZvkLR+sw7Wva+kMQ/Kn0MQ9fs8iiUZ/iyxQiX:+QQ/T8zQKLzTkTmQ908iiUJiyaiX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9fa8b33e80d8a9105fc3cefade3d6ab_JaffaCakes118

Files

a9fa8b33e80d8a9105fc3cefade3d6ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e35b8819c33acc41c342775e5c330cf3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
LCMapStringA
LoadLibraryA
CreateFileA
ExitProcess

user32

CharLowerBuffA
SetWindowLongA
wsprintfA
CreateWindowExA
CloseWindow

advapi32

RegEnumValueA
RegCloseKey
RegDeleteValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegOpenKeyA

Sections

.text
Size: 157KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ