b459557adba4842e44a664d48032686d_JaffaCakes118 | Triage

Sharing

General

Target

b459557adba4842e44a664d48032686d_JaffaCakes118
Size

7.9MB
MD5

b459557adba4842e44a664d48032686d
SHA1

e9983e436965408bb6846540d3ca3000ef672376
SHA256

599564345b032bdfb9caad496f61cc46ffbd01ff789ca0654ec716a7d113d00d
SHA512

482aedd8a3648a95507724f4ea065c34003ea24e796af943ab9efdf48ab6e3fb3e5fff2b82ba5dbac01a33c05186263cc56fc145c18662442561e72a930b00ab
SSDEEP

196608:YhBjcqoOURk63xmxDf8DCBZuD7Q5DpQfwUjbUA+:Y7jcqorBYDf8DCHuD7Q1efw2UA+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b459557adba4842e44a664d48032686d_JaffaCakes118

Files

b459557adba4842e44a664d48032686d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1033af39cce64f16f8e2b5d090f61063

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
CreateFileA
GetCurrentProcess
ExitProcess
LCMapStringA

user32

SetWindowLongA
wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegEnumValueA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegQueryValueA

Sections

.text
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ