d33b2c2da539368f0a1408ab751c4b77_JaffaCakes118 | Triage

Sharing

General

Target

d33b2c2da539368f0a1408ab751c4b77_JaffaCakes118
Size

340KB
MD5

d33b2c2da539368f0a1408ab751c4b77
SHA1

98b4f003f3422f4069b946df6527a8da33c4ea9e
SHA256

1f3df53ac5d96d72b6ad3df1086485e4ead3e90474281bd60cb543ceaa7c13dd
SHA512

79dcb518673cc31ffbe014d23fc7c153696ea1373c31c30376f87fdf3d0a06fc37db905bffb4d61a3c1bc835ee3dbb74f13924bc75774c564708c854c7c785b8
SSDEEP

6144:QTSn7raohQJ2mVixENgNycOobHI5SOGsBvQ+IjkPgObABAabDGFn4JH/m:j7rbhQlVlQMobNOGIIjEU2fdoO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d33b2c2da539368f0a1408ab751c4b77_JaffaCakes118

Files

d33b2c2da539368f0a1408ab751c4b77_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19e22a2887b534aba6fb81a3d89ad6ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
LoadLibraryA
CreateFileA
CloseHandle
ExitProcess

user32

wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA
SetWindowLongA

advapi32

RegDeleteKeyA
RegCloseKey
RegEnumValueA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegQueryValueA
RegDeleteValueA

Sections

.text
Size: 320KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ