e23d9fb7a372af8ad481fbd3dcd2cd36_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e23d9fb7a372af8ad481fbd3dcd2cd36_JaffaCakes118
Size

176KB
MD5

e23d9fb7a372af8ad481fbd3dcd2cd36
SHA1

c11bae20eaf75ad4fc0635efa12fb018aef43a5a
SHA256

43a66388caaaa8c4f59b788817d654543b4bf9fc6e83ed929478efae7fb2ad75
SHA512

d625a358b9e8be28028a215ab185ab10cfedd97e6b6c22357a2bba706a9e14b26a07b5620aa516a56596960fcb2741c6f1c0f0d85caa268282fc9b8257e00efc
SSDEEP

3072:0vZEF70XMjsseGVt6J330vDBdyB+DGeiU1W6k3ZgZVryugGrLurwa1HWeeo7fs4x:6Mjsseg6Fcdo9RaW+bykrSZ8ETsY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e23d9fb7a372af8ad481fbd3dcd2cd36_JaffaCakes118

Files

e23d9fb7a372af8ad481fbd3dcd2cd36_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9b9c8f9b23c3fd064369398b8360fbeb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
ExitProcess
LoadLibraryA
CreateFileA
LCMapStringA

user32

CreateWindowExA
CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA

advapi32

RegDeleteValueA
RegCreateKeyA
RegQueryValueA
RegEnumValueA
RegSetValueA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 158KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ