fc219242b0278f03438937aeb4419fd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc219242b0278f03438937aeb4419fd3_JaffaCakes118
Size

152KB
MD5

fc219242b0278f03438937aeb4419fd3
SHA1

2c36b51362c8a7c4a3e1fe500fbac487cc1a26e4
SHA256

81e798ce46bf83ae9af3d46bf37de308457bc513d7d93de8d7e916e95c893177
SHA512

f0349231591d5fce2bb72e81e0be61b55a357654bed707a50365f928c64199f1919536be1ee51f0963af6443d7ea944af0c5adc49deb533d63e765103c884849
SSDEEP

3072:mFcz8THl9LT0ukpZKdwygFB5zSooci19D927jpKQC2AJJBPkzI:7wVhkrKojOoNizwRluJBPkM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc219242b0278f03438937aeb4419fd3_JaffaCakes118

Files

fc219242b0278f03438937aeb4419fd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cfc3aa8f4c2cb2b0da0a0ccf13d679cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
GetCurrentProcess
CreateFileA
LoadLibraryA
LCMapStringA

user32

CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA
CreateWindowExA

advapi32

RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegEnumValueA
RegCloseKey
RegQueryValueA
RegSetValueA
RegCreateKeyA
RegDeleteValueA

Sections

.text
Size: 134KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ