db70ae95af78544541418fce139c198f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db70ae95af78544541418fce139c198f_JaffaCakes118
Size

240KB
MD5

db70ae95af78544541418fce139c198f
SHA1

8246dd83cfc494671e31123d9eb83b7fe9a7392e
SHA256

5b83d31e6f78d9115845af14c1cdb4034184879645a2595a8d07519ea4e23095
SHA512

abc0b40808e71b2baf6d724ee3ff1336f9edadbc06f319dde87e6a66757aa0af66a5343cb7fd46366e97e54e541c13bf1a3ea76f97a6fd16fc0809da2f714da9
SSDEEP

6144:DktJmZZPMxJXvJ/jzeBNRugHpVwtPx1+Jo:6UBcJXvJ/jyfRXHzCf+S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db70ae95af78544541418fce139c198f_JaffaCakes118

Files

db70ae95af78544541418fce139c198f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ea24e288fe7a546c33895eeabeb68b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
ExitProcess
CreateFileA
GetCurrentProcess
LoadLibraryA

user32

CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegEnumValueA
RegCloseKey
RegDeleteKeyA

Sections

.text
Size: 212KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ