b42f20d40e93a02f17144422ec26b049_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b42f20d40e93a02f17144422ec26b049_JaffaCakes118
Size

189KB
MD5

b42f20d40e93a02f17144422ec26b049
SHA1

53530b5e6d8b8c32d651681a2de0436e0dd16d90
SHA256

61d1564f0847f48726c486138d49e79da193974b6f1705dc77220008700ca823
SHA512

45a0510b5363baecb2214cb4102be177af5c122ee6f8f3998ccf6687b55e61bb8943418e3eb2119b657bf9124b291aaadf9c84c26b23e22f79fe10ed2bff6da4
SSDEEP

3072:T9dRh7gEzRcNFi8aQZWGZFUtmP2qIv8WzVHg7Ow4b9P8BWLlYaRDle5Ito/:jRhjcNFi8aHltz5v8WzVHFwM8KllDo57

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b42f20d40e93a02f17144422ec26b049_JaffaCakes118

Files

b42f20d40e93a02f17144422ec26b049_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9446b04c17d8ceee6780de5d236be123

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
LCMapStringA
ExitProcess
LoadLibraryA
CreateFileA

user32

wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow

advapi32

RegEnumKeyA
RegEnumValueA
RegSetValueA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegQueryValueA
RegCreateKeyA

Sections

.text
Size: 146KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ