b79d04f628cff1487a3162ffa7c960ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b79d04f628cff1487a3162ffa7c960ad_JaffaCakes118
Size

404KB
MD5

b79d04f628cff1487a3162ffa7c960ad
SHA1

79af8ac84e8c0feb2fdc1e098d072b28f25e8b04
SHA256

e08eec43d029844637fbbf04bfb8aff4fcd4235be78a69b8d5b6bedd9fb8ea57
SHA512

2c8502c13fedafbafa3607288a3d063ba1e5b30200596113a729e021b7ed2e12c03ef312cad93ef86e0aab87dc5f7dbd056cbc4880c3d4fd805835464822d393
SSDEEP

12288:DswmAi8A8DysAHtoa9wk0txqANeOcB3d7Xo:DjmAi8AIyZHtYtNebNc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b79d04f628cff1487a3162ffa7c960ad_JaffaCakes118

Files

b79d04f628cff1487a3162ffa7c960ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac235062e4957f6667f5ea681da67850

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
ExitProcess
LoadLibraryA
CloseHandle

user32

SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA

Sections

.text
Size: 381KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ