f080906150b5cd6e7cc65b62bec91423_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f080906150b5cd6e7cc65b62bec91423_JaffaCakes118
Size

221KB
MD5

f080906150b5cd6e7cc65b62bec91423
SHA1

6f87fbed81d14d187aaf2331b0164d72676c43b5
SHA256

d17f402bffda1adae576de3aae0b9a3ffa40a430af8c6cdcdf1b904477a3bd66
SHA512

a39ecbefb435f9e8501d6f727742170be684fac0defe859ef7b7068ccac6033700649ad132834f7c43b5d120c960df5f516ee443cd9e874b0e23d5a54ceeab59
SSDEEP

6144:rUDzE8QP3K4B0mp1mwqaypcM5aZazg5XYszYk:2OdXISk+7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f080906150b5cd6e7cc65b62bec91423_JaffaCakes118

Files

f080906150b5cd6e7cc65b62bec91423_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a1ffc213b914efed85679d8646df802

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
LoadLibraryA
CreateFileA
CloseHandle
GetCurrentProcess

user32

wsprintfA
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA

advapi32

RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegDeleteValueA

Sections

.text
Size: 165KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ