038443fbe10971d0201fe31449d82a6f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

038443fbe10971d0201fe31449d82a6f_JaffaCakes118
Size

1.2MB
MD5

038443fbe10971d0201fe31449d82a6f
SHA1

8b6747ad46e7df76d98ebf8a5bada257d7d344d2
SHA256

7799e28067bb32192acd42e4b77035b76311871cb3689c027b28050ff2529ccd
SHA512

3211ae3dbc67326f30908aeb558791e5adca6827bc49b67456323a1b6e21c9be2bf621cb0a6cb9226568739ac52513a6550d56512aa64bd33302894020acb635
SSDEEP

24576:3JLEqxgyNKLJY0LRInG5yiCCGCcH6Jb1hZPztzQl4a6:pEqgLJYUInG5yiC9CcH6Jb1Hztslp6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
038443fbe10971d0201fe31449d82a6f_JaffaCakes118

Files

038443fbe10971d0201fe31449d82a6f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a3a0930c6bb047be1823dd22df461a92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
ExitProcess
CreateFileA
GetCurrentProcess
CloseHandle
LCMapStringA

user32

CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow
CreateWindowExA

advapi32

RegCloseKey
RegEnumKeyA
RegEnumValueA
RegDeleteKeyA
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegDeleteValueA
RegQueryValueA

Sections

.text
Size: 4KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ