c28c1e6189f8cfc459a084e79d7def05_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c28c1e6189f8cfc459a084e79d7def05_JaffaCakes118
Size

215KB
MD5

c28c1e6189f8cfc459a084e79d7def05
SHA1

2af15072e0e0ee2772be570cb0bc0f59d9d514cc
SHA256

3015e83ad86c59ceab36b32e92d7cb99a385dd20bf49725611737bb87b27001f
SHA512

9aef2609c77957a3db7aa2291c48fc1347c03ec6f3a41ee174781104cf1a2f22a5c2b52263619592d0c6008ac41e67b2c6b45b1f382938ea75f16fadec25d590
SSDEEP

3072:M8wa/XjEL0OMv6fT6g1kun+CRkEqyctRSdTGUEyuK04fYSOP/1epJoLpOiP4SU0E:MAX44xSLL1k3CRkEMp5/PndOAO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c28c1e6189f8cfc459a084e79d7def05_JaffaCakes118

Files

c28c1e6189f8cfc459a084e79d7def05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3fa43ccbd1fcc0290c48b8948213478

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
GetCurrentProcess
CloseHandle
CreateFileA
ExitProcess

user32

CreateWindowExA
CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA

advapi32

RegQueryValueA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegEnumValueA

Sections

.text
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ