c1fe463cbea1a692184fb3a1c0f5b0de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1fe463cbea1a692184fb3a1c0f5b0de_JaffaCakes118
Size

180KB
MD5

c1fe463cbea1a692184fb3a1c0f5b0de
SHA1

07f9439b5c8072641011ac17f563bbd4865c8298
SHA256

2d5425339cfd961496c56199889dc5e52f0925227a8a778acae2bace57906e28
SHA512

2809239ac6924b5de6043f5f4088e0c8dc3ff3ebad21fae2d9032180bb3fc04364ccd02c1518cf22a0153e8ecbb79861dde1699577b91f79411d9627706447a6
SSDEEP

3072:b+sOpD34rEKQsEhFBWxy1obXeP83t3GPbo0tByAgxMGK/xWILceOsIbY0D2r:ajpyEKQ/hkyEXpJ6o03yAlJDLceo2r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1fe463cbea1a692184fb3a1c0f5b0de_JaffaCakes118

Files

c1fe463cbea1a692184fb3a1c0f5b0de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0caa466d2496154d27d1dbc2a0146512

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
ExitProcess
GetCurrentProcess
CloseHandle
LCMapStringA

user32

CloseWindow
CharLowerBuffA
CreateWindowExA
wsprintfA
SetWindowLongA

advapi32

RegDeleteKeyA
RegCreateKeyA
RegEnumKeyA
RegDeleteValueA
RegSetValueA
RegOpenKeyA
RegCloseKey
RegEnumValueA
RegQueryValueA

Sections

.text
Size: 150KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ