febc4c02e85118995feac0e5b6482408_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

febc4c02e85118995feac0e5b6482408_JaffaCakes118
Size

1.2MB
MD5

febc4c02e85118995feac0e5b6482408
SHA1

45d180ba5c3c6a46ec062d54ba98ca40979e14c6
SHA256

fbde4b3188d92f940bcb2e5ed7e6ebdc8634ab3fee3521ec4c37868777e751c8
SHA512

efb9ae67b6d22480638ae5443f2e9b33777c48de30084243bd371db23be4f98ebb66b5a86cce583bbe347034774b0ed5383a20829bf1a5d245cef0281734664a
SSDEEP

24576:uPnT3qnDv0VtbSJIcaIQCDjAm0Gj9GH2oPUM5JKFf4LvhbA2fQzDn:uL3qDv7NaMDjLhrqUM5JKp4N/QzT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
febc4c02e85118995feac0e5b6482408_JaffaCakes118

Files

febc4c02e85118995feac0e5b6482408_JaffaCakes118
.exe windows:5 windows x86 arch:x86

bec9a692239c7192ffc02cc8574ee8d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
ExitProcess
LoadLibraryA
CloseHandle

user32

CreateWindowExA
CloseWindow
SetWindowLongA
CharLowerBuffA
wsprintfA

advapi32

RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegEnumValueA
RegSetValueA
RegDeleteValueA
RegOpenKeyA
RegCreateKeyA

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1008KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ