ce6ec218e3c1c2a63314be25513d0cba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce6ec218e3c1c2a63314be25513d0cba_JaffaCakes118
Size

704KB
MD5

ce6ec218e3c1c2a63314be25513d0cba
SHA1

46aaaa7101b7ae84f03c00c76e8be7195b5f98dc
SHA256

b6bd1a53bd23cb819c3f9fa4d7fd22187327b03ecf7e31a995ab9b29496ae2fa
SHA512

00310de7fd958b9f1f8930765bc1fcddc638155d5605c699cace321a9986003934c336447509ffb15551ebc65e6d7a4df9ae6391fb900cab9edd0d7c499ba060
SSDEEP

12288:YfmSJ9QfmHSkE2g+9ouRTS24tvRlkIXhKpFiGy0sUmkvOAgqtT12G:mmk9QurEURWHtRHXhKpZwUmSOSYG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce6ec218e3c1c2a63314be25513d0cba_JaffaCakes118

Files

ce6ec218e3c1c2a63314be25513d0cba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f58a87d935cbb3f9756939073667ff2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess
LoadLibraryA
LCMapStringA

user32

SetWindowLongA
CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegCloseKey
RegOpenKeyA
RegDeleteValueA
RegSetValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyA
RegEnumValueA

Sections

.text
Size: 635KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ