d70c2225d025c2a5267cd075db4fb148_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d70c2225d025c2a5267cd075db4fb148_JaffaCakes118
Size

228KB
MD5

d70c2225d025c2a5267cd075db4fb148
SHA1

2008a1144d5557a9d5becc3254fd2779a8e46fbb
SHA256

60c08fb5acb69baa7190d0c2180c3c3e9c49531c5c2f084fad84adbd33f9ed64
SHA512

77896046d456f6890af58d1181ae291935ffd1e135a1d5215b7aa620531a9e0afb59488eccffbef0f523df506725117b3e318684f14c4b3ce4fb00b75d74be9c
SSDEEP

6144:kCsSe0guFXlg5RDQbrBBByAdReUsPOtXkz:kCsDic4r/WOY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d70c2225d025c2a5267cd075db4fb148_JaffaCakes118

Files

d70c2225d025c2a5267cd075db4fb148_JaffaCakes118
.exe windows:6 windows x86 arch:x86

5276fed60ac1575333936cb79585d1e7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
GetCurrentProcess
CloseHandle
CreateFileA
LCMapStringA

user32

CloseWindow
CharLowerBuffA
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegQueryValueA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegCloseKey
RegDeleteValueA
RegSetValueA

Sections

.text
Size: 209KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ