eed7bd04b6dbb35a5375bf1d09d89530_JaffaCakes118 | Triage

Sharing

General

Target

eed7bd04b6dbb35a5375bf1d09d89530_JaffaCakes118
Size

576KB
MD5

eed7bd04b6dbb35a5375bf1d09d89530
SHA1

94b612d7fd206c696c755c07ac3622d1288019ac
SHA256

06ffff3684656fe8cf9dd787eddda81ac3ca724e5b31b316f7ca25bc105a3c13
SHA512

7b8a5f6dd6e7910155c94c525a25443891eb682e9f97a1fe2fcc2a5a5cdb467205dcbcaa54639047df8d2348035491dd750be69096cd77ca13332455d36560d3
SSDEEP

12288:E2yPPSpLwLX2pKqPdmzHSN/xVEQyFPS6a2e6/wmsJnyvUkjd:WPPA2GpKq1NgFPO2Hwb4UkZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eed7bd04b6dbb35a5375bf1d09d89530_JaffaCakes118

Files

eed7bd04b6dbb35a5375bf1d09d89530_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2447fe9cb71c3a6f605b6d0ee37fdb94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA

user32

CharLowerBuffA
CreateWindowExA
SetWindowLongA
CloseWindow
wsprintfA

advapi32

RegDeleteValueA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegEnumValueA
RegCloseKey

Sections

.text
Size: 455KB - Virtual size: 456KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ