0d6269d606d605568d7a1326a49b0211_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d6269d606d605568d7a1326a49b0211_JaffaCakes118
Size

165KB
MD5

0d6269d606d605568d7a1326a49b0211
SHA1

16ee3c46a600d2df55e8c9b32b95a232b8086eac
SHA256

c5e0591d9ba5594ad703a33a68cae5ca2e7ce2e4b4889f37669f54b9418f3865
SHA512

741f68950fa5bea63bd0931a8d3ea228db46841ba3b2bcd75294c9bf45dab7c18258663071ad254aa94c758f1b498cfd8bc82894762768eb9f2dc3c41765da23
SSDEEP

3072:dXhpNjlK7El4Mu/z3oa4vrIUGpNJjEjSMiU5Ik8CQwdN:NzNjlKDR73oSU2GS5U+k8uN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d6269d606d605568d7a1326a49b0211_JaffaCakes118

Files

0d6269d606d605568d7a1326a49b0211_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad0977248fe269b963bfa56c8193a78d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
GetCurrentProcess
LoadLibraryA
CreateFileA
ExitProcess

user32

wsprintfA
CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA

advapi32

RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegSetValueA
RegEnumValueA
RegQueryValueA
RegCreateKeyA

Sections

.text
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ