117b6a45caaa028b882e167a056f2e91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

117b6a45caaa028b882e167a056f2e91_JaffaCakes118
Size

972KB
MD5

117b6a45caaa028b882e167a056f2e91
SHA1

6e50135201aaec531da393c81fa1a422e776ec33
SHA256

9faaebdfa58352d64c5da0258d041ad9cb04ae279d4fd684c1c7c6052f42fb19
SHA512

16a98719e8e587a95d51bd2974b4ffad0b02c7c1424643e9c24f3963ac8b5ab2ae061d697b6396c7d888ce912a4e292954f21d6d08c9f1849a9c80eb3d1997ee
SSDEEP

12288:qGI1DCgLruYUBoRJDc4ZS9sg2OM0VKwDEkJ888eauEU+G9/7iLOfB3pVZ4HY91c:q51GyrScVXA95VlGMEOcOfNZCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
117b6a45caaa028b882e167a056f2e91_JaffaCakes118

Files

117b6a45caaa028b882e167a056f2e91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ed8b92d5e194a0b3f7586d944396428

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
GetCurrentProcess
LoadLibraryA
CreateFileA
LCMapStringA

user32

CloseWindow
CharLowerBuffA
CreateWindowExA
wsprintfA
SetWindowLongA

advapi32

RegEnumKeyA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegQueryValueA
RegSetValueA
RegDeleteValueA
RegEnumValueA

Sections

.text
Size: 888KB - Virtual size: 888KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ