cf3af8ec9d682e09cb2a2d9482c82a9a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf3af8ec9d682e09cb2a2d9482c82a9a_JaffaCakes118
Size

206KB
MD5

cf3af8ec9d682e09cb2a2d9482c82a9a
SHA1

7afae1e4279d0b320ec1fea7beb6db75a3aa3b18
SHA256

3ae8f2ad1910139bec7978450a1b83c8ac4fdc1c90630b5f720fd77df3655bac
SHA512

ca71acb422ee2df1d8ecce71304cf3336097cbcf32526bf1830113d5e21486d34aa08daf1c05242bc88c9a8957effe6abb2927ab1f21329246f9bf6bf0aa5553
SSDEEP

3072:qxtC/f2VrSUZlkf+GgqeuietLE+YT2ZxpsZx8lTdeaOmC2/qDfpkeFHDOR8sn0p:qxE/eV2fGqe1SLF1zGQl5lPofpDU/0p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf3af8ec9d682e09cb2a2d9482c82a9a_JaffaCakes118

Files

cf3af8ec9d682e09cb2a2d9482c82a9a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3fd1355b6452d710c40f7b6cb4b10ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
LCMapStringA
ExitProcess
CreateFileA
CloseHandle

user32

CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegQueryValueA
RegSetValueA
RegEnumKeyA
RegCreateKeyA
RegOpenKeyA
RegEnumValueA

Sections

.text
Size: 130KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ