c07e90b3b452cc1f3da331c0ee30492d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c07e90b3b452cc1f3da331c0ee30492d_JaffaCakes118
Size

178KB
MD5

c07e90b3b452cc1f3da331c0ee30492d
SHA1

d03502d41387342f338ed1deef2d4482107d0f4c
SHA256

bc2b428e40ddfe6bd6501cd1cc9edca5824ff8449cb46601e1ce5c2536015d51
SHA512

665718baa9908bbc8391a73b1ac69b2b51eabd79a56715e22bc3e37b44994871ba670723e2264164c826a9199532f17b13a2b805381494ab2ac7963c82be0901
SSDEEP

3072:xqZC2josdLMyOJq9FLC+9M8U9hWb0xRHgvQBeWJ+sAJeMIhYsMu6G8durS5m:xcHf8Xt8sRxJVAJez4ZP5m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c07e90b3b452cc1f3da331c0ee30492d_JaffaCakes118

Files

c07e90b3b452cc1f3da331c0ee30492d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ca8df6a565d60a802d2f654412ebeed8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
CloseHandle
LCMapStringA
CreateFileA
ExitProcess

user32

CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA

advapi32

RegEnumValueA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegEnumKeyA

Sections

.text
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ