b9faad8c5edf366d0ac70926e8d3ab1c_JaffaCakes118 | Triage

Sharing

General

Target

b9faad8c5edf366d0ac70926e8d3ab1c_JaffaCakes118
Size

24KB
MD5

b9faad8c5edf366d0ac70926e8d3ab1c
SHA1

c362283d5c319ce2825c332b7f59fa393f8eda02
SHA256

962eb4912b2ff6b1c0496b86f930c677994e2b0b8264bbdb62e985bfbb3cbaac
SHA512

db444627d23a836baa2e56880d3a4b110ba715bfca42a642e92b594a25fcdefd20fd58a5c2cb6bcb82a53b0c381461c3522a3d64f1cef785232564da9abd4d10
SSDEEP

192:6Exu+NTcA4IH+vKFyKocLhtOaPq/vNAo0RU7pRXV3CuuuuMuubA/3nbto:6ArH+vsyDyPOaPqu47vV3M/3nbt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9faad8c5edf366d0ac70926e8d3ab1c_JaffaCakes118

Files

b9faad8c5edf366d0ac70926e8d3ab1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17b7b18f39c6f6c8a4d90a391df3d2a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LCMapStringA
GetCurrentProcess
CloseHandle
CreateFileA
LoadLibraryA

user32

CreateWindowExA
CharLowerBuffA
SetWindowLongA
wsprintfA
CloseWindow

advapi32

RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegEnumValueA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
RegSetValueA

Sections

.dwing
Size: 4KB - Virtual size: 22.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lbex
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ