d2c61237b5f482050773b5ef9d07438d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2c61237b5f482050773b5ef9d07438d_JaffaCakes118
Size

232KB
MD5

d2c61237b5f482050773b5ef9d07438d
SHA1

30a3f34d9aa7a30aa5421369878bdc266ce85c0a
SHA256

70b84c542c71899b7c3cd6cfe97dde7dc272911ee84584486a7a33cc2800ac7d
SHA512

8686a0d4117cd061c06f33e065acf860bdd0d2a3ce9ab6ea60992a66b5b540fb9597c423b0fab6dd2cfb3d36017ce9226bba248f790074cf0bd04d73814431e0
SSDEEP

6144:dHQ/LUfa294/IDcGdSqboC5LSRw68v+LI9GpdBK:dwjma294ItSheeRw68v04GJK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2c61237b5f482050773b5ef9d07438d_JaffaCakes118

Files

d2c61237b5f482050773b5ef9d07438d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

02b99559c49a5c5ea4826d49ebd43e27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
ExitProcess
LoadLibraryA
CloseHandle

user32

CreateWindowExA
CloseWindow
wsprintfA
CharLowerBuffA
SetWindowLongA

advapi32

RegDeleteValueA
RegQueryValueA
RegCreateKeyA
RegEnumKeyA
RegEnumValueA
RegSetValueA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 128KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ