ea9e475179b91e61101db58fba57d4ad_JaffaCakes118 | Triage

Sharing

General

Target

ea9e475179b91e61101db58fba57d4ad_JaffaCakes118
Size

175KB
MD5

ea9e475179b91e61101db58fba57d4ad
SHA1

993db11784350274af3770c7c9396c4cd8813612
SHA256

44991cca167ebbdd3b358e61c9306523c992d0852ed37e67d7ad6895a014ddb8
SHA512

671a85d0d8de6d405cf7901081824e23c3b5ace21b74c744b83eb30aca302770df57a6c27410f6b4a52bac0ec3058d87c1e8ccc1f1cf88461310d8844ec55051
SSDEEP

3072:sGRudum0tAr+vaD3Ombq4rWQzpiMR1wVzpv1Wh/G96V7BtQe6Ey5BUp5tB:s+u6ArgG3nVtiIkzptWhNTt4UBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea9e475179b91e61101db58fba57d4ad_JaffaCakes118

Files

ea9e475179b91e61101db58fba57d4ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82df491efd987d141cdde5ba1a5d5fb2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
LoadLibraryA
ExitProcess
CreateFileA
CloseHandle

user32

wsprintfA
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA

advapi32

RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegSetValueA
RegEnumKeyA
RegDeleteValueA
RegQueryValueA
RegEnumValueA

Sections

.text
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ