d62a1c55cb10a3e0cfab9af81742e097_JaffaCakes118 | Triage

Sharing

General

Target

d62a1c55cb10a3e0cfab9af81742e097_JaffaCakes118
Size

212KB
MD5

d62a1c55cb10a3e0cfab9af81742e097
SHA1

44c8eda8126ac30382675b9b9f43282154dccb52
SHA256

60a48e528e5477f9d78e474385909466dc45a41aa99d71e20b6bbc0e5fb73b30
SHA512

4528cc3628e161d07467d2bf3e90d0f9e44156f5ea1ba16cdcba7fd5ed13070dd13f285704bf6176eb9c741cff706bd4d6627fd6294f35afd04f460fc4827183
SSDEEP

3072:cUaWtvULCej1/Qcf529pQMHCLQUyrpiAXsCIstH9+2E/DhJ4fwRAFCBmgSygZfYY:cdccLbf0Q7iBsuH42MeEOCBUZwY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d62a1c55cb10a3e0cfab9af81742e097_JaffaCakes118

Files

d62a1c55cb10a3e0cfab9af81742e097_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c63d186ce3929381425e3c24a713c5eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
GetCurrentProcess
ExitProcess
LCMapStringA
CloseHandle

user32

CreateWindowExA
CloseWindow
SetWindowLongA
CharLowerBuffA
wsprintfA

advapi32

RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegQueryValueA
RegEnumValueA

Sections

.text
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ