c78733424206c8457ebce6242525d983_JaffaCakes118 | Triage

Sharing

General

Target

c78733424206c8457ebce6242525d983_JaffaCakes118
Size

177KB
MD5

c78733424206c8457ebce6242525d983
SHA1

e7daeb47fa76d6f8423d192c5f1d4593d370d84a
SHA256

8ff5f967cb7c24c495548198c288566d762f089090d4a7610f334773eec196a9
SHA512

9b280d064319c9f7b371c9562e7b4c988b2cec342d2f854e2097462c618cb6ae5e6304ace82d2edf827f64995c03283fb1e79dcca6cbd191dec356617f1ae579
SSDEEP

3072:tT3mFcdjUY8Pgh/ez9deM0L+21Qlz16zqeWH6PZM1V7eW0uBTCkmevS:h3AcdjFe3j0q8nm+kVxdBukmL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78733424206c8457ebce6242525d983_JaffaCakes118

Files

c78733424206c8457ebce6242525d983_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7dde2662e1acf4890f0dbcfc6b7c1b11

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle
LCMapStringA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegCreateKeyA
RegEnumKeyA
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA

Sections

.text
Size: 156KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ