2eb7ccdaec7bee375c6d0c34c4c56711_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eb7ccdaec7bee375c6d0c34c4c56711_JaffaCakes118
Size

201KB
MD5

2eb7ccdaec7bee375c6d0c34c4c56711
SHA1

0b2a803ca4f21916a43cb54d9dc169f3408d483e
SHA256

e7ba32a6fbcc1ab5decf4a49b0f527cafc425228fc13fb1bd01ef403be421bc4
SHA512

f7b914229f68c5deb7dcf94fc02e45471c21187d950be5f20d94dbc59c811a24d732f52d15b0647cc7f0a80dfa4fcbf110d333ad0b6e4a794da902de545d027b
SSDEEP

3072:rwllYOHbAU6zolbyVuGkBwwwwwwww8L9GWBwS7Y8XlUDG8yTunnVGu1Flo:OYO8UeUbquGDL9PjuDG8ouVGr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eb7ccdaec7bee375c6d0c34c4c56711_JaffaCakes118

Files

2eb7ccdaec7bee375c6d0c34c4c56711_JaffaCakes118
.exe windows:4 windows x86 arch:x86

793d9664a352360a7efbec446a94427a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
GetCurrentProcess
CloseHandle
LoadLibraryA
LCMapStringA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegSetValueA
RegQueryValueA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
RegEnumKeyA

Sections

.text
Size: 158KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ