f0121a2f4015d2463d679e27660cb160_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0121a2f4015d2463d679e27660cb160_JaffaCakes118
Size

161KB
MD5

f0121a2f4015d2463d679e27660cb160
SHA1

31336584d93e77482556335a7ab4da89f4b160f9
SHA256

640013304b296571ba28ecc0ddb7aa5ef5ffc1420ece8397c8810a0e2be64e20
SHA512

468c9e43d1bbf610b93480fc69cfef4d4272bb1cb1e27cd5adcf63a8a7669b0fc04a6eb1b0d7c548919258b7b845d8d3e9a352290843f9e11618cdd115dd9ac3
SSDEEP

3072:gHaXNRoxhK7/YNt+rDCzHUNRgPmhpuS2/N0r+TjxRC9PeJIGVTkb:gHaXjoxhKTYKuUNmPmhES2/N++fxwQV8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0121a2f4015d2463d679e27660cb160_JaffaCakes118

Files

f0121a2f4015d2463d679e27660cb160_JaffaCakes118
.exe windows:4 windows x86 arch:x86

80c3d43e8f28de9d763db749b4beb911

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CreateFileA
LoadLibraryA
ExitProcess
CloseHandle
GetCurrentProcess

user32

CreateWindowExA
SetWindowLongA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegDeleteValueA
RegEnumValueA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueA
RegOpenKeyA

Sections

.text
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ