2db512a061fc3b4ed5b78fc1a04b0a07_JaffaCakes118 | Triage

Sharing

General

Target

2db512a061fc3b4ed5b78fc1a04b0a07_JaffaCakes118
Size

197KB
MD5

2db512a061fc3b4ed5b78fc1a04b0a07
SHA1

b1d71d4f08f5eb8cf0d25a030cc69297af2b8f50
SHA256

918bf8404480c1ec6cd43c1162cc143ce63d3526dcc3c6695e4fcd36ac8a276c
SHA512

77a874b809e72e8337d495b6c6ba68adb81f55fd547306f5332021780510b994185520e881e689535020eab7d1e878fd2e87cdcf90c6ba1b0f82810e2c890c50
SSDEEP

3072:cl4b/0Sq77o+XlcUxeQUjKiDJ8ejb+Fe+a+CUlwRMGW5LQ+0E+fIO5vu+n4c:M+07nDxAK0VjwI+ChR9AL0EJO5hR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2db512a061fc3b4ed5b78fc1a04b0a07_JaffaCakes118

Files

2db512a061fc3b4ed5b78fc1a04b0a07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

16f58602bea9e9fe0114f64811cdfdec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
ExitProcess
GetCurrentProcess
CloseHandle
CreateFileA

user32

CreateWindowExA
CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow

advapi32

RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegEnumValueA
RegCloseKey
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
RegSetValueA

Sections

.text
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ