da7a7cce5ff61868a39f2153b1f5ecc1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da7a7cce5ff61868a39f2153b1f5ecc1_JaffaCakes118
Size

1014KB
MD5

da7a7cce5ff61868a39f2153b1f5ecc1
SHA1

2888598356adb664ddd1e33181325d4188ffe6eb
SHA256

c806e3f0fc787669984a184c4c85658f0ab3c33fbea39c44d4f1e001fdb57cde
SHA512

3a0892429773b63fbd47980b2215dad71fc566058a88892bdc5310d0c713078348314d79549947c030c3fc12e19f8615b87a5db968d56715d60c384176917e1c
SSDEEP

24576:hqxf/UwxAXxZQ8q9Dj3Drr1sMVAWYeY8vppKaSlPw1GtyYF:hqtILvWflFVFTql4Igm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da7a7cce5ff61868a39f2153b1f5ecc1_JaffaCakes118

Files

da7a7cce5ff61868a39f2153b1f5ecc1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f72895a7e28828837ee306d24700db57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess
LCMapStringA

user32

CloseWindow
wsprintfA
CreateWindowExA
SetWindowLongA
CharLowerBuffA

advapi32

RegDeleteValueA
RegEnumKeyA
RegSetValueA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 4KB - Virtual size: 16.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ