068f1383da1b6d34659d557495dc3e65_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

068f1383da1b6d34659d557495dc3e65_JaffaCakes118
Size

168KB
MD5

068f1383da1b6d34659d557495dc3e65
SHA1

e42ae9555c71a6bfffe179c71b53f7ee76892007
SHA256

e32a71d2bf024c351a45360618630c0f66d2c30355e857bfd2f7baf6dddc46dc
SHA512

1b456497f018b221aebfcff2498a5812af61a5b32f6e9d734da60478a5997638a3daa1b1268d180ea01aa5853298f1988d714b8213a3e941ca7305f4c5adf615
SSDEEP

3072:AUCbJW7z+Z5K9LoCKIW7tUw8bu5WX5t/10XGIdWSZP8OXMNLSNBQ0WK:AU4WP05K97KIW7Gw8yWX5v0XGIdlegMS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
068f1383da1b6d34659d557495dc3e65_JaffaCakes118

Files

068f1383da1b6d34659d557495dc3e65_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a5d0661ce2990bc1209433883cc65f1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CreateFileA
CloseHandle
ExitProcess
LCMapStringA
LoadLibraryA

user32

CloseWindow
CreateWindowExA
SetWindowLongA
CharLowerBuffA
wsprintfA

advapi32

RegCloseKey
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegEnumValueA

Sections

.text
Size: 147KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ