03b7081564e659353b791f31ea6a5576_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03b7081564e659353b791f31ea6a5576_JaffaCakes118
Size

160KB
MD5

03b7081564e659353b791f31ea6a5576
SHA1

006a32bc52aa9d389248b72f6a7ff9cc9cc79961
SHA256

7515e678a865d129b5d580f6050d7267a7431f9bb5cf8f5f091027ac3efc6972
SHA512

3486ccd9878503f3a4f74ba7e257f7fedc701016b879125921ebddb051d7197914c4acf86cccb4e536ad3d6809d7a6393da449c0cd53eaf7c1a8edc80d4b42b2
SSDEEP

3072:zmwfK9Th3OJ9xYZThza/Nwd5xbT1g6iGoXhWPRdGXuzWTuDzh9bq4OIg9abc:foFgMTSU5xbTb0o5gMAkt/Ol9Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03b7081564e659353b791f31ea6a5576_JaffaCakes118

Files

03b7081564e659353b791f31ea6a5576_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90b22a853ff634d231ff157a15441ee0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
LCMapStringA
ExitProcess
LoadLibraryA
CloseHandle

user32

SetWindowLongA
CharLowerBuffA
wsprintfA
CreateWindowExA
CloseWindow

advapi32

RegDeleteKeyA
RegCloseKey
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA
RegSetValueA
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 143KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ