b7c40c05392206a79ef427dd342f22e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7c40c05392206a79ef427dd342f22e3_JaffaCakes118
Size

653KB
MD5

b7c40c05392206a79ef427dd342f22e3
SHA1

5f0b3c0f974e094a6a64b16033b4604f86b8d010
SHA256

e7b483ba3c155a4982b4bc643514a644313e24a1145c4de82afa36ca43e4916f
SHA512

a868a019ef2339753fa317e2ca781d4e4970c6315d07e5f264e851de0dd0dd3d5133874ec7cdf30a55bc6741726b6bf33fa02b4b064ba396f030afaedf03b165
SSDEEP

12288:rJhFu2uIbkEa5Ovinxr411uzZ8uwjiPQ/MY5n6MyqjoIr:jcCQ5OanxkjudT/QT5n3yYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7c40c05392206a79ef427dd342f22e3_JaffaCakes118

Files

b7c40c05392206a79ef427dd342f22e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b36752c88b1f95039f35e87c0b05eaa0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
LoadLibraryA
GetCurrentProcess
CreateFileA
ExitProcess

user32

wsprintfA
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA

advapi32

RegSetValueA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegDeleteValueA

Sections

.text
Size: 126KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ