b496956e0765185bf23801f175c06c0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b496956e0765185bf23801f175c06c0d_JaffaCakes118
Size

176KB
MD5

b496956e0765185bf23801f175c06c0d
SHA1

8a75db9941e2818193866b1a68b8376b7b3ec4e7
SHA256

e3c4256f9be86f76bb7b96b19e30848756d45fd43000e84d21f86deb23198ef0
SHA512

b940544be01ce63afa538e06ceaa62bd43fda144c334f4f7dc7b3b0c2a88820a628be4d8fe4121e86c792159295ff61c3b4928758fe911f86245098e19c3a743
SSDEEP

3072:o7jjmu287HQa9112B7Zc/KNNXBASLsUEibgCn+XpgaHI9uEvh6o:a3mTy32fc2NXSSLKRCn+XpgV9u7o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b496956e0765185bf23801f175c06c0d_JaffaCakes118

Files

b496956e0765185bf23801f175c06c0d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfd58566f60174660aa964bf042bedf6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
CreateFileA
ExitProcess
GetCurrentProcess
LCMapStringA

user32

wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegDeleteValueA
RegEnumKeyA
RegCreateKeyA
RegOpenKeyA
RegQueryValueA
RegCloseKey
RegSetValueA
RegDeleteKeyA
RegEnumValueA

Sections

.text
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ