2dc009a614ccaebb61f134fa84b9d5f3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dc009a614ccaebb61f134fa84b9d5f3_JaffaCakes118
Size

185KB
MD5

2dc009a614ccaebb61f134fa84b9d5f3
SHA1

b913816a13132faada635b5609c04b164c353e8f
SHA256

0199f32b57744568be184169be174a4c832fd7431ef7787b409ffaaba63e92f2
SHA512

b40f89ad6f493cd67686387cd9fb9989677c6d5adca947900a0ca1abf9299edd3c6793443724b6a144a1e29ccf5efc1556dfed79a5d0bcf54bcf368269a7b79d
SSDEEP

3072:Op45DTtRXgNnGDW1f1HbYs449lfl6NRZSVRlvPL8J9WaZs39NzWLT4aL9SlLKBVx:Op49zynGDWN1Hb3449ld0SH18JMaghWN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dc009a614ccaebb61f134fa84b9d5f3_JaffaCakes118

Files

2dc009a614ccaebb61f134fa84b9d5f3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5b220f9cb6becff0f3452dddf6687805

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
ExitProcess
LCMapStringA
GetCurrentProcess
CreateFileA

user32

SetWindowLongA
CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegEnumValueA
RegCloseKey
RegQueryValueA
RegSetValueA
RegDeleteValueA
RegEnumKeyA

Sections

.text
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ