ad243cf32849b2d5efa0d94220e8514d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad243cf32849b2d5efa0d94220e8514d_JaffaCakes118
Size

245KB
MD5

ad243cf32849b2d5efa0d94220e8514d
SHA1

93283d393222b542331fcfeaac0838d9311d48d0
SHA256

af97abc8f6872121b280fcd3638a6d1152edb299916a44d8c20b0fa73d9dd946
SHA512

74e01c1018fade940e7ed560fd9701342534212f30d952c988db4aa60e8fbbe572b1966d2c2d243efc3167bdd00398b90e0f1bd4d0beb18dbdd254cc8b59f53b
SSDEEP

6144:MMZxcx8J5uybal9CgahI/nMXfJ1SOQjAvKL:MkqxKMybSahI/MPmvjACL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad243cf32849b2d5efa0d94220e8514d_JaffaCakes118

Files

ad243cf32849b2d5efa0d94220e8514d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aeb7bae7b4172053c33f7f68c56ab2c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
ExitProcess
LoadLibraryA
CloseHandle

user32

CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA

advapi32

RegDeleteValueA
RegDeleteKeyA
RegSetValueA
RegOpenKeyA
RegQueryValueA
RegEnumValueA
RegCloseKey
RegEnumKeyA
RegCreateKeyA

Sections

.text
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ