256da11a1ccc844d39a7573110c4fe44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

256da11a1ccc844d39a7573110c4fe44_JaffaCakes118
Size

230KB
MD5

256da11a1ccc844d39a7573110c4fe44
SHA1

3d0c43f22ca118f2f0c3b82e32fbe7e3e52a3dbf
SHA256

baf8b6a799a469836f5a27ccd91347469b43a0654ffdeba7ad82dfaa2ea39c7e
SHA512

4354dc1504451783cdbfbae185ee6e42a1e990a98132df6204f621f49334c9f38469701857dd0c4a65b52e23210bcd55e5f4947140837ce6b81b26c9144fb013
SSDEEP

6144:eNXqANMUKi2kVAyC3K2KJnLru7y/0yzqSqWqUi2:6qxtkVHFrL67byuTWpi2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
256da11a1ccc844d39a7573110c4fe44_JaffaCakes118

Files

256da11a1ccc844d39a7573110c4fe44_JaffaCakes118
.exe windows:1 windows x86 arch:x86

cd66bca547246338d4898041890a01be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
GetCurrentProcess
CloseHandle
LoadLibraryA
LCMapStringA

user32

CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegCloseKey
RegOpenKeyA
RegEnumValueA
RegSetValueA
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegDeleteValueA

Sections

.text
Size: 173KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ