fb75ad250d01bfdd7f6b2efb37d1ce1a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb75ad250d01bfdd7f6b2efb37d1ce1a_JaffaCakes118
Size

180KB
MD5

fb75ad250d01bfdd7f6b2efb37d1ce1a
SHA1

395cf2da6719c671ec95dc72bd3bf161f8b51e31
SHA256

96fd4691aa1f0439aca4d46231ffaef945a1367c4ddf6c48dc35c18cf07697a6
SHA512

3b9ca0a6d1a35c332ad0733d7c6a36dc6ef3e3b867da12c295e820609455eb2885825d9b22c050a07bf20b417d3f3587794ee29448a77352ae151d3e2a039ed0
SSDEEP

3072:Y6NqUlHKLg6HgIlBmCQKVPmDE/TrcHv0D/MvuFWQbtnbSVWmPyPcLRiRFjB:1NHxWHJlrPzLruban2VNocUF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb75ad250d01bfdd7f6b2efb37d1ce1a_JaffaCakes118

Files

fb75ad250d01bfdd7f6b2efb37d1ce1a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b9443c78f3a2776efb7382ad64f7ae0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
GetCurrentProcess
LCMapStringA
CloseHandle
CreateFileA

user32

wsprintfA
CloseWindow
CreateWindowExA
SetWindowLongA
CharLowerBuffA

advapi32

RegDeleteKeyA
RegOpenKeyA
RegSetValueA
RegEnumKeyA
RegCreateKeyA
RegEnumValueA
RegDeleteValueA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 156KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ