b10296b07fcd3e42c3c0d62c6662b290_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b10296b07fcd3e42c3c0d62c6662b290_JaffaCakes118
Size

160KB
MD5

b10296b07fcd3e42c3c0d62c6662b290
SHA1

f5c8e4da28ed440a6032b372d826d8b155f403ec
SHA256

878ad20e5c721251c0a5f22468ff875a4d62cc40f8881613f61a56796dbb05f6
SHA512

62f270e1b1dcaf5543f6d43f1d8373d6037652b3968dd81165420447835c3f6e5912ded77f185b74b4c9363b7908bbb81ac03b185d72ec1dcd737180b199972c
SSDEEP

3072:hwTqdIwrKpgBuSy+8DcFJgTUcNmIkvOnZMDv1+OwZeQcyFD5OSrvtd:hwWOwGmBuSy+KEgTUnIkvbDvYigVTtd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b10296b07fcd3e42c3c0d62c6662b290_JaffaCakes118

Files

b10296b07fcd3e42c3c0d62c6662b290_JaffaCakes118
.exe windows:4 windows x86 arch:x86

670f104d1f316f3c53a970fc00df33a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
CloseHandle
CreateFileA
LoadLibraryA
GetCurrentProcess

user32

SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegEnumValueA
RegCreateKeyA
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA

Sections

.text
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ