d0bae3596d7fc7f37e131fa8e4d5aa39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0bae3596d7fc7f37e131fa8e4d5aa39_JaffaCakes118
Size

182KB
MD5

d0bae3596d7fc7f37e131fa8e4d5aa39
SHA1

28fd1a39e089b85da563e51b998b7814c0d26c19
SHA256

c586efa68ea2f56a3dbe37a4754cd4b75c8af5cc907739adfa7eafceffb2c97f
SHA512

8a6558872a7f2d385ce7431e7f5ba17d206b1270bf100a755a9288c910d45f1456c60d0af88e9b46559b4edfa1ac7345959244f136263f2ee964593c19bf2ba4
SSDEEP

3072:Cdr/+ru/oXBcT7JkjkstZ1uy/Z17mko9CuHYvg2RPUbaUbD5YY1:Cdr/mJxcx8J5uybal9CpgSPUblbDKY1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0bae3596d7fc7f37e131fa8e4d5aa39_JaffaCakes118

Files

d0bae3596d7fc7f37e131fa8e4d5aa39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bed15b04f64ee74d51eb60d9821bec76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
LCMapStringA
ExitProcess
LoadLibraryA
CloseHandle

user32

SetWindowLongA
CharLowerBuffA
wsprintfA
CreateWindowExA
CloseWindow

advapi32

RegDeleteValueA
RegEnumValueA
RegQueryValueA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegEnumKeyA
RegSetValueA
RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ