fb20e2c456cf1a8bb35574203c901920_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb20e2c456cf1a8bb35574203c901920_JaffaCakes118
Size

1.4MB
MD5

fb20e2c456cf1a8bb35574203c901920
SHA1

b0a27f3b7a06896e6626c1ee7cafbfa60b6f09bc
SHA256

bc2a5cb44b79a606ca0eaa55c89f6bbe3a6aef57d7057a85d56b3b01cd9de766
SHA512

165be4cba3d58f9cfed0ad063ddd94a5fe6d88128ff079a607750b37a210f3d79b1a4a030a986a9e8ba1170b6525716c0d1339921fff923a9eecb70023bcd9fc
SSDEEP

24576:g+Gsf/pTML3m/HLEHMyfvMSKPoHP8wCWKY8v+gi51N3Hu5YZsuiXHVUOFAhe0:LN3pTp4H7OU4M8v+Zx3O5YZRcFAhe0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb20e2c456cf1a8bb35574203c901920_JaffaCakes118

Files

fb20e2c456cf1a8bb35574203c901920_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dcefb55ae9ce7dbc04ce0354ce4e0c97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
LoadLibraryA
ExitProcess
CreateFileA
LCMapStringA

user32

SetWindowLongA
wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegDeleteValueA
RegSetValueA
RegEnumValueA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ