b5dde09b495fc9cfcabdaef47a370929_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5dde09b495fc9cfcabdaef47a370929_JaffaCakes118
Size

764KB
MD5

b5dde09b495fc9cfcabdaef47a370929
SHA1

38242914d9e2a6535d65fb49d1bc0ab83f4c4ed2
SHA256

dcf2bee868449ea17dd5fb3af6b93ae987c31386609a94c2bc5d3ca844303a20
SHA512

636b97176acf3a4c445d17bed5d3923ad13de95d1cbcb68b93bff70688bdd8d894e095785621046a105721781f92e08f73ca1f0c28092ab4c929c90210fbe4c6
SSDEEP

12288:hSC4/3Ytfak7H1dAyAtmZ7uideX2m4fq+xbZJajLvPN+N/Max:r637uH179nm4S+YjDN+N/Max

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5dde09b495fc9cfcabdaef47a370929_JaffaCakes118

Files

b5dde09b495fc9cfcabdaef47a370929_JaffaCakes118
.exe windows:4 windows x86 arch:x86

039a6584ede6f19b110abf4423739016

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LCMapStringA
CreateFileA
LoadLibraryA
GetCurrentProcess
CloseHandle

user32

wsprintfA
SetWindowLongA
CloseWindow
CharLowerBuffA
CreateWindowExA

advapi32

RegQueryValueA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegCloseKey
RegDeleteKeyA
RegEnumValueA
RegEnumKeyA
RegOpenKeyA

Sections

.text
Size: 584KB - Virtual size: 584KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 272KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ