c92f743ffb772cad435c5afdad6b3f66_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c92f743ffb772cad435c5afdad6b3f66_JaffaCakes118
Size

196KB
MD5

c92f743ffb772cad435c5afdad6b3f66
SHA1

fe4ac96dfa3810228c97b1f38c918138ef775cc2
SHA256

7b767e917ba890042d816ac0064f61132b88800f38afbec3ada81f4ca9c90d4e
SHA512

6c3d4c586e3e1fbb7ae7234014aa9c6085a22f351c5f49da06a0b3de1d65f716a3ff43adad805455b035a0a5f8297a46377cda3b5e69a9455621b6379a5f7136
SSDEEP

6144:njtSt0+twVKsUCK2zx73FsNUVqbhvyr8gKM6P+:ZStZ/KKaFeOo5y4g50+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c92f743ffb772cad435c5afdad6b3f66_JaffaCakes118

Files

c92f743ffb772cad435c5afdad6b3f66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b0e81f8d03792a9a7cad60c653e46bc1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
GetCurrentProcess
CloseHandle
CreateFileA
LCMapStringA

user32

CloseWindow
CharLowerBuffA
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegCloseKey
RegEnumValueA
RegQueryValueA

Sections

.text
Size: 165KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ