d9c31d00800dd9560cd6a81511b4e221_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9c31d00800dd9560cd6a81511b4e221_JaffaCakes118
Size

172KB
MD5

d9c31d00800dd9560cd6a81511b4e221
SHA1

9dd218bd6e4644717731aea0817b21a1e1b01f5e
SHA256

bec36d221edfe63c08800e8fc5b0853d636d4a1cef60141e5e40b4b6e73b0579
SHA512

2d74079e185e61cfab3ab0e7c5512168c8211e6251fc24b9bdb715f58c98fc6eed49466fdaa0f477d5f2f6d95bda728801eaa83f4732c4e5216e32c213753ab7
SSDEEP

3072:FyGmNQA4fPd7Snop3UcXNhoqgOiVYbw6VX7VsDbM164Qzs76NAYqI3ZB:FyGPXYA9fMOdwQkbMk4QIAAx0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9c31d00800dd9560cd6a81511b4e221_JaffaCakes118

Files

d9c31d00800dd9560cd6a81511b4e221_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2fc8d1de5800178d0eca5c769696f785

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
GetCurrentProcess
CloseHandle
LCMapStringA
ExitProcess

user32

CharLowerBuffA
CreateWindowExA
wsprintfA
CloseWindow
SetWindowLongA

advapi32

RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA
RegEnumKeyA
RegSetValueA
RegOpenKeyA
RegEnumValueA
RegDeleteValueA

Sections

.text
Size: 153KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ