f0a88d5225ba252cbcc01404f836267e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0a88d5225ba252cbcc01404f836267e_JaffaCakes118
Size

189KB
MD5

f0a88d5225ba252cbcc01404f836267e
SHA1

ad9dea516f218e0df9983da2e2737943559ce224
SHA256

e3e67ca71caa6875c684a46482bdee851e482c77fe0fa49b45461f0adadc35d7
SHA512

8f8e907e56ad934f86ceb8f4198ca43d7d1c9346b1bba6413d19e0f1e00168c3ea9110003eebc3a4321261dd614c00d73016b9ddc094a36c1e9d4063f8627ac2
SSDEEP

3072:29nUEACuTfVUi7VRwnJn/1gzrYgoE4pwMEqRmJmUwoH4GdYZhUm075ziMJjsDeyP:2OBCuTb0JazzHcxUwoHzdCMiMJjsD2Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0a88d5225ba252cbcc01404f836267e_JaffaCakes118

Files

f0a88d5225ba252cbcc01404f836267e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

349ac1d82bd45d25202512bcd32ea24e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
LoadLibraryA
GetCurrentProcess
CloseHandle
LCMapStringA

user32

CharLowerBuffA
wsprintfA
CloseWindow
SetWindowLongA
CreateWindowExA

advapi32

RegDeleteKeyA
RegSetValueA
RegCloseKey
RegEnumValueA
RegQueryValueA
RegCreateKeyA
RegEnumKeyA
RegDeleteValueA
RegOpenKeyA

Sections

.text
Size: 165KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ