ea912fbd19f50d12930dbeda44c8d8ec_JaffaCakes118 | Triage

Sharing

General

Target

ea912fbd19f50d12930dbeda44c8d8ec_JaffaCakes118
Size

185KB
MD5

ea912fbd19f50d12930dbeda44c8d8ec
SHA1

10659c69b5a19aaaa1afe47eca15ded81bdb8b52
SHA256

90e7f832c6b780ff1b1b12e763eac23c653e2c1a26bb549839047320f3a51cfd
SHA512

5842ca01454a85fed604154ac1e8bb7de0411b37bf46211159fc25bc8844d92fb25779493d22b00b47cd2af6b185e0ebcdbd68d2aafcca29ab90956218b5e642
SSDEEP

3072:IRGq3Kz1HJaLc3/P/1f0z6Tcp6sPV+d90LOAcqyO2AQmiuiXE3E2ITvGpyovn39:IRGq34oLGP9KwhkMUiXgdITOp7/39

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea912fbd19f50d12930dbeda44c8d8ec_JaffaCakes118

Files

ea912fbd19f50d12930dbeda44c8d8ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df4078623c3b673a42fef7d54689fd3a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
ExitProcess
LCMapStringA
CloseHandle
CreateFileA

user32

CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA
CreateWindowExA

advapi32

RegQueryValueA
RegCreateKeyA
RegEnumKeyA
RegEnumValueA
RegDeleteValueA
RegOpenKeyA
RegSetValueA
RegCloseKey
RegDeleteKeyA

Sections

.text
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ