b89094dfbf568cf23bbe038493ff04c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b89094dfbf568cf23bbe038493ff04c0_JaffaCakes118
Size

154KB
MD5

b89094dfbf568cf23bbe038493ff04c0
SHA1

1cac8151de7fd4ddd98a56aad919245682372347
SHA256

d6d66201b430cd730ea8c0472279c74939de684aedf3cef4faeb95d197972803
SHA512

a2177e32851fc3c6f56e36d760d1f9e488c8bef37454a813c18a6edace2bf5e2bfe4c20a19305af135089a3d12e13d03356712b14c9094278ac88c3465354f0e
SSDEEP

3072:6HPeB3s9szIn/dtswOtqQD8jBw1YF+KMT8iIdGnWaBkWlGvNg:CPeB30/d6z0BGc+3IHdGnWaaxvG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b89094dfbf568cf23bbe038493ff04c0_JaffaCakes118

Files

b89094dfbf568cf23bbe038493ff04c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab18de26928713958b673868829a38e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess
LCMapStringA

user32

wsprintfA
SetWindowLongA
CloseWindow
CharLowerBuffA
CreateWindowExA

advapi32

RegOpenKeyA
RegSetValueA
RegDeleteValueA
RegQueryValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA

Sections

.text
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ