02d938422a20658d9cf40c5d75108d7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02d938422a20658d9cf40c5d75108d7b_JaffaCakes118
Size

172KB
MD5

02d938422a20658d9cf40c5d75108d7b
SHA1

f42c610ad9eed1dd82565310c3880164d9845730
SHA256

e6bd3ad20d59f5a31e702b4f830641fc137c15d5377d959ff791c9dc31e8b2b0
SHA512

8af439b5145d42e86c3467893ebbf4c08289cf144c66ba49f7ad061b18687a5a0ffd34ea6961034083050e61d85003c1b2edd66d56989347176a0361020e5b0a
SSDEEP

3072:OWSSca7XLUjX9YrHSFBQVANu0nGeZ0KEpjAONf6GEPkQEXx4u/nfllyZUpHdpKbW:Ooca7XLE9CEZNu0DZippf/OkQEqcnfl5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02d938422a20658d9cf40c5d75108d7b_JaffaCakes118

Files

02d938422a20658d9cf40c5d75108d7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dea89328b8ff4032f0ae3ce2c6436366

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
LoadLibraryA
GetCurrentProcess
ExitProcess
LCMapStringA

user32

SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumValueA
RegSetValueA

Sections

.text
Size: 154KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ