b4d863a5baa7fc93408f7d4313bde8d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4d863a5baa7fc93408f7d4313bde8d7_JaffaCakes118
Size

249KB
MD5

b4d863a5baa7fc93408f7d4313bde8d7
SHA1

1a170f77c98eeca39e9803af690cd7a74afa1943
SHA256

b6bbfc49a758a843b3ee5c6210855a2f28d92d0e10afa68e861115977f8f4f3c
SHA512

b72abb50ddd5c47ec2a41f28a07f81e053e32f592b2e13cc4bb5f700c661746cd907f7c10e5716f5326bf64f0b719701d960bb48677b563bde1047f4eca31e9f
SSDEEP

6144:/5v9JZCW8tgFrENTtIRbTkaDchMajSv1DX+r:/pP8WFFiT6YhMt16r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4d863a5baa7fc93408f7d4313bde8d7_JaffaCakes118

Files

b4d863a5baa7fc93408f7d4313bde8d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8d81e017b4924e4addb01f48fb0edc0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
CreateFileA
CloseHandle
GetCurrentProcess
ExitProcess

user32

SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA
wsprintfA

advapi32

RegOpenKeyA
RegCloseKey
RegEnumValueA
RegCreateKeyA
RegSetValueA
RegDeleteValueA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA

Sections

.text
Size: 153KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ