bd66d63b723138fd3e1e0c4c20b789df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd66d63b723138fd3e1e0c4c20b789df_JaffaCakes118
Size

245KB
MD5

bd66d63b723138fd3e1e0c4c20b789df
SHA1

a9dee9b8259133d8c7cbab3ec49fc11bd7cabbba
SHA256

dffdd2385a4de0e1bba536a0fd182f128e86dd36814454cf19a59961a8988e08
SHA512

e6c920adce2cbee6f668b560280a8c53f8ee8c814124e8bdd4b0e1c4c468b1c9995e654e34e6ef8015f405fe497469670e7b2d9c3901c9810cf3c929d2024130
SSDEEP

6144:AimSERQVRhp64731ujPcT2EFtaHYrGAZNN3PR30kp3ZSzZwOqUi:AimBypF2z+0Y9/NR0kHSzw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd66d63b723138fd3e1e0c4c20b789df_JaffaCakes118

Files

bd66d63b723138fd3e1e0c4c20b789df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1a18daf52ea9f90cf89e9fdd9fb575c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
LCMapStringA
LoadLibraryA
CreateFileA
ExitProcess

user32

CloseWindow
SetWindowLongA
CreateWindowExA
CharLowerBuffA
wsprintfA

advapi32

RegSetValueA
RegCloseKey
RegQueryValueA
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 179KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ