efe562c7b6df14c1ed73cef6bfd896e7_JaffaCakes118 | Triage

Sharing

General

Target

efe562c7b6df14c1ed73cef6bfd896e7_JaffaCakes118
Size

230KB
MD5

efe562c7b6df14c1ed73cef6bfd896e7
SHA1

f2090f7c2cc8d5bc3f8dec66bc7e54450892bf3f
SHA256

48f93811d1e587da61970695bac22f00238b4cac8f1e0276aef82bdc386587a3
SHA512

34d47821e26202d8021d696e1beb60062749121e33096199569c90de9b1d135aec4936c0c06e46032aeeb6149e31e3f1e530fc8b630a01e7e003aa55f1755488
SSDEEP

6144:SIHfl23IRqXdkJCDQwmYo+OEkEyGpmF0WPYNmwgZ:SAflnkXdmwmYo+OLGpmF0WPqmbZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efe562c7b6df14c1ed73cef6bfd896e7_JaffaCakes118

Files

efe562c7b6df14c1ed73cef6bfd896e7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81df7b5cf68441a60d4e003e80c07f5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
LCMapStringA
CreateFileA
LoadLibraryA
CloseHandle

user32

wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow

advapi32

RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueA
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 156KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ