bf3f9490a9e576d065bf857757197136_JaffaCakes118 | Triage

Sharing

General

Target

bf3f9490a9e576d065bf857757197136_JaffaCakes118
Size

212KB
MD5

bf3f9490a9e576d065bf857757197136
SHA1

2dec6c834c6bce1166935e2d10acdd09aa64e184
SHA256

5b193a8d93167f4a8050314bb1144d780edb4640fc7a1a7cea9f7a5dfb72b7be
SHA512

620872847882b7c8819bd677f472ddf2db388b013a1cb76ecba765c3263078384d43f0c4f82617c5de697365cc67849104c836afc90c50b7eb1d8f8b44619a02
SSDEEP

3072:0de/cKetKI1cVDA6yZ03Lwi4cVpn1aH1nFr5HMlomdzNRuNyUt7cM9:DCt1cVc6yZ2w0PaVT0oAzMNt71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf3f9490a9e576d065bf857757197136_JaffaCakes118

Files

bf3f9490a9e576d065bf857757197136_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4708f9142cffd7b04cd466763e7a0360

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
LCMapStringA
CloseHandle
LoadLibraryA
CreateFileA

user32

wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow

advapi32

RegQueryValueA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegEnumKeyA
RegEnumValueA
RegSetValueA
RegDeleteValueA

Sections

.text
Size: 122KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ