ec915d1633b2e2e03759fb0186597219_JaffaCakes118 | Triage

Sharing

General

Target

ec915d1633b2e2e03759fb0186597219_JaffaCakes118
Size

216KB
MD5

ec915d1633b2e2e03759fb0186597219
SHA1

754bae3b2c79233a1ebf60f3bc8e58f641ae9590
SHA256

9088b50009559b0862fe45c39f6686b3f3f84133ce2f8bec7165957eb270be5f
SHA512

ab38e1c48d4af07c7a7e1679257286c9131cbfa52fb1653bf0cf2ce7db37dc1888a33f6d224089de94b42c5577e3118096f86618c9c69f2512d349a182d751a5
SSDEEP

6144:EQaTpvBwDdO/tRmYRcNm9ashRC3jaTcRkIWOcMn:kNmD8fmqBjhRC3OeXb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec915d1633b2e2e03759fb0186597219_JaffaCakes118

Files

ec915d1633b2e2e03759fb0186597219_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9d656e9444c5d82ac397fe910e256729

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
CreateFileA
LoadLibraryA
LCMapStringA
ExitProcess

user32

CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA
wsprintfA

advapi32

RegSetValueA
RegDeleteKeyA
RegQueryValueA
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegEnumValueA
RegEnumKeyA
RegDeleteValueA

Sections

.text
Size: 194KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ