020e990f6930c14b531115abf17b14f5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

020e990f6930c14b531115abf17b14f5_JaffaCakes118
Size

168KB
MD5

020e990f6930c14b531115abf17b14f5
SHA1

b8d8c56ce02f0244cb1c5095d17e1359b4ae32e4
SHA256

e1781050dd20f04f4aa89425e92ce2e863932d42181c1490635dca10440bdc3e
SHA512

19bc2fd17bd88607633badbb4c60530a43161181702058ab24e8b687116982bfa8b7fa39845895a5b1a9d0bbb271eaa41b4d75a883acf3490a4946e1bafac129
SSDEEP

3072:7apbd+yqED0eA2hu2V/wIr6Iy5GFvuKwCNStmUqMlnV2hpEdlW+:E9x4eA6hYIrIY5pEYURbll

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
020e990f6930c14b531115abf17b14f5_JaffaCakes118

Files

020e990f6930c14b531115abf17b14f5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

463dff481e215c1b00f7cb80803aa8ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
ExitProcess
LCMapStringA
CloseHandle
LoadLibraryA
GetCurrentProcess

user32

CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA
wsprintfA

advapi32

RegEnumValueA
RegEnumKeyA
RegDeleteValueA
RegQueryValueA
RegOpenKeyA
RegCreateKeyA
RegCloseKey
RegSetValueA
RegDeleteKeyA

Sections

.text
Size: 148KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ