e18e11a692104a134d141cd7b80d55c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e18e11a692104a134d141cd7b80d55c8_JaffaCakes118
Size

497KB
MD5

e18e11a692104a134d141cd7b80d55c8
SHA1

416c9b5bc84af870345c516d7d86c4d0b96db529
SHA256

1b91ca18bc79cfdbb14c2d7f6b78bb104db9712763bf551f2960464d8e735950
SHA512

6ed493d009a724ff0130e95741670779ce35defc29ee7c9c4c95ff461f0c2e7db9685f70ac0d92ad4eb7a202d4887e4ad0276b6d2436d108fb44ecb7bb6d1733
SSDEEP

12288:zke4+LQCDiphK0gMy+oWUl0Dd/lYLxvXM/UOSbTUBBcnCF:weQZpxyNWUId6hXM/UOSbTEBcnCF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e18e11a692104a134d141cd7b80d55c8_JaffaCakes118

Files

e18e11a692104a134d141cd7b80d55c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

255f0b41e85279347bb8ce532d12dcf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess
LCMapStringA

user32

wsprintfA
SetWindowLongA
CloseWindow
CharLowerBuffA
CreateWindowExA

advapi32

RegDeleteValueA
RegEnumKeyA
RegQueryValueA
RegCreateKeyA
RegSetValueA
RegCloseKey
RegEnumValueA
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 186KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ