fc4d24d8619883b1ba129adf91030908_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc4d24d8619883b1ba129adf91030908_JaffaCakes118
Size

164KB
MD5

fc4d24d8619883b1ba129adf91030908
SHA1

a8c4e77fdb93903ddfe41698541f076b4ef35e4f
SHA256

619832eeed13d4ad7cb17bdcfcc578e0f505b2737dc39d9f713a807a46dc9045
SHA512

394d9c67ac9cf161fcb321756d68c53343629c4d26aac0a9923b97af69f37c5218dce090cfa4c9830a74bbb3fa8f2aa8178ba3d5e5cd8c70a3bb9cfee8c697d3
SSDEEP

3072:+3t1/Ask5Mnih1YN8gkMVkJKXxRXmaFB3qQfQhEjzA91T/CQrkqjqCkYNDuZPfT:+nAsmMn41YigkkkJExRXPYCQhEjzA912

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc4d24d8619883b1ba129adf91030908_JaffaCakes118

Files

fc4d24d8619883b1ba129adf91030908_JaffaCakes118
.exe windows:4 windows x86 arch:x86

557ce969ab58a4682d52ae1c41dfd291

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
CloseHandle
CreateFileA
LoadLibraryA
GetCurrentProcess

user32

CloseWindow
CreateWindowExA
SetWindowLongA
CharLowerBuffA
wsprintfA

advapi32

RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegEnumValueA
RegQueryValueA
RegOpenKeyA

Sections

.text
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ