b827573b12f62fd7c92edddba05fdcf4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b827573b12f62fd7c92edddba05fdcf4_JaffaCakes118
Size

164KB
MD5

b827573b12f62fd7c92edddba05fdcf4
SHA1

e6438bc33ce0e85bd9b349aba53a93283552fb6d
SHA256

13ea219ab80f6164774cf8f84570b426b6a675196989c679ef320f747b2f8ee8
SHA512

527b18f4397b9aea23f05b927ea515e410d83ed02e493fcdb5a7c8d44135940fd166191db6ca4cc92180b76cee046f714d70d1f02238ef8da80794ef9b1343a5
SSDEEP

3072:mVygZNFbPZJmarjnpEEbzEKLtMsPP97PXrap2bfuGGGoGVmA8sWFj9E:mVygZLPXrjpE7Y1n9XmxFgX8sWh9E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b827573b12f62fd7c92edddba05fdcf4_JaffaCakes118

Files

b827573b12f62fd7c92edddba05fdcf4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c1850450e69e78312d002c1b87065ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
CreateFileA
CloseHandle
GetCurrentProcess
ExitProcess

user32

wsprintfA
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA

advapi32

RegDeleteValueA
RegEnumValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegQueryValueA

Sections

.text
Size: 147KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ