ea2dcf01bac6e93dc422d66308b4044c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea2dcf01bac6e93dc422d66308b4044c_JaffaCakes118
Size

196KB
MD5

ea2dcf01bac6e93dc422d66308b4044c
SHA1

bb1deac54b308ff7cf5999636befc0f1c7d61914
SHA256

23c5d4ac78620d52f6e403322381a869028e4041caf0249fda58a10703d745e7
SHA512

d78c045a9bb40897e9312f0edc4bebfa3360d5c9d3a4e0d67b983841bb4c708f1023d41aeac8eca8a2bc314cefb5541c1544ce11939df902f82447669db447a1
SSDEEP

3072:bGkeFyxsvNXnT/XnfWk/Z7C136I06Cb7pAW0M2YNbAYv/cHNlomui2pED52GHRDw:b8Fy2BNdBIEGWNNsu/cTui2A2GxDw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea2dcf01bac6e93dc422d66308b4044c_JaffaCakes118

Files

ea2dcf01bac6e93dc422d66308b4044c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0534062f1849ec931ff2b6821b6324f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
CreateFileA
LoadLibraryA
ExitProcess
GetCurrentProcess

user32

CloseWindow
wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA

advapi32

RegCloseKey
RegSetValueA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegOpenKeyA

Sections

.text
Size: 172KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ