ceac230e20e9d77e17549294211b0594_JaffaCakes118 | Triage

Sharing

General

Target

ceac230e20e9d77e17549294211b0594_JaffaCakes118
Size

208KB
MD5

ceac230e20e9d77e17549294211b0594
SHA1

61a72f50763ca1f30b9d1629ba3decc1ec146b6e
SHA256

a306fbf474413cddf6d205e41c2795e707130fb1185ae266f316554278b3d555
SHA512

adca6967231f055072bd4ad7c16a9a8677b9f72a6b779e21d0390e1a23fe7909996a0db29fe1dc78fd18225a0b01305a549bd70d622f8db22f1614236b0d6a33
SSDEEP

6144:VTct9VgtIp+wBRh+EMUpqgyV9DZegkI1bg4jD:V+VAubAERqzQ3Ib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ceac230e20e9d77e17549294211b0594_JaffaCakes118

Files

ceac230e20e9d77e17549294211b0594_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8a2b3e6e9e0bc5277a9a84f0a87c1f55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
CloseHandle
GetCurrentProcess
ExitProcess
CreateFileA

user32

CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow
CreateWindowExA

advapi32

RegCreateKeyA
RegEnumKeyA
RegOpenKeyA
RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegQueryValueA
RegDeleteValueA
RegSetValueA

Sections

.text
Size: 161KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ