d9a72b464f5c1b9cb501fed182ba8739_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9a72b464f5c1b9cb501fed182ba8739_JaffaCakes118
Size

192KB
MD5

d9a72b464f5c1b9cb501fed182ba8739
SHA1

c0895c10cb2818e47cb79028514abf9006857fa9
SHA256

895eda5bde28d522ef2b8e97f5746b980ebf6bfe22b102d8e420f3cd43082a61
SHA512

7d99e903b0675e4bc4a0d2745c7024f78bd2e8edd5af630c12508a6c97c4dc3b02b8291164caaa781a183dbb88b66a37d195477e2e5e9ce16509b444120d8b06
SSDEEP

6144:KgiUQrleRHb40wgneUBk6TMSoq+duaWgK:KoQry4dgeUG5SoN/0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9a72b464f5c1b9cb501fed182ba8739_JaffaCakes118

Files

d9a72b464f5c1b9cb501fed182ba8739_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c166bef72fee8c0715e1e3043793ecb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
LCMapStringA
CloseHandle
GetCurrentProcess
ExitProcess

user32

CreateWindowExA
SetWindowLongA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegDeleteKeyA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegSetValueA
RegDeleteValueA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 169KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ