fe130e9194ab4bdba49498144ab5fd70_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe130e9194ab4bdba49498144ab5fd70_JaffaCakes118
Size

220KB
MD5

fe130e9194ab4bdba49498144ab5fd70
SHA1

0aadec69c68fadf3d7a4833b68f2efbb86060d5a
SHA256

bbf63efbc63a39e6303961dc999db748ba43502033f0b138eac6f10cc410d51d
SHA512

7a7ac0db3632ed9fe74b99e9f0429e0ea22e163e89abc2a4698d80c755df87cefae41de72c915317d7776088af2ec23405629fd1aaf4cb622c69225527dd45b6
SSDEEP

6144:kAraw75o0wptbvOx4uUQ4z3L7q7kT8KnS/yjyeJYo9:k6z5WpRU4u/W3/8bFed9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe130e9194ab4bdba49498144ab5fd70_JaffaCakes118

Files

fe130e9194ab4bdba49498144ab5fd70_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9338189610a338fef7a441904ed66728

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
LoadLibraryA
LCMapStringA
ExitProcess
GetCurrentProcess

user32

CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA
CloseWindow

advapi32

RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegSetValueA

Sections

.text
Size: 202KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ