dfa9f6cc9a9122cc7b0a72bc08931908_JaffaCakes118 | Triage

Sharing

General

Target

dfa9f6cc9a9122cc7b0a72bc08931908_JaffaCakes118
Size

184KB
MD5

dfa9f6cc9a9122cc7b0a72bc08931908
SHA1

776ff8c6de268d87fcffef2e59cfc44ca4f34782
SHA256

dd077c79c0025334fe8f0397bfabf10317fdc6c7d8d4a26a3ec758f92c877a89
SHA512

14208fcaadf7b954cd21e18bf2a89b6538407ad0b12377e355719a579bbb7ea6ed04f4d023e99787c53ff09145e322646c883a7389624dadbb980e22263428b2
SSDEEP

3072:J+DRigCLWZxUyriTBJ8ajcJEN+ks5f67uXYrGxpSlCvtlukD8Gk2//SLDDG3fnAO:JAihLixiP8ajcJENlu6zRwFlukfEzgk8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfa9f6cc9a9122cc7b0a72bc08931908_JaffaCakes118

Files

dfa9f6cc9a9122cc7b0a72bc08931908_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30dfa9b43ebff829dc916df3b9fcbf0e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
GetCurrentProcess
CloseHandle
LCMapStringA
ExitProcess

user32

SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegEnumValueA
RegDeleteKeyA
RegSetValueA
RegDeleteValueA
RegCloseKey
RegQueryValueA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 166KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ