301b0ea527920a3a5a0a32957342f0e0_JaffaCakes118 | Triage

Sharing

General

Target

301b0ea527920a3a5a0a32957342f0e0_JaffaCakes118
Size

388KB
MD5

301b0ea527920a3a5a0a32957342f0e0
SHA1

b3bc0ed456f4444d695a93ebf4aa0cbc96711df3
SHA256

c2fc1390af38fe4ac26d340b7627b3b82fcdaa27a0890fc9b65a43510648bed6
SHA512

a7859a2765ad5fb4afbabfcb3461f6537e71c933c785ae128b522e2ae20c90ed1431456f6a11c8fd95a469f88f2b57a5d9527aa7ae98b1d421737219a38cfdc7
SSDEEP

12288:3hmn041gxanKXWQ/2JMIDiI2Vj4qQGPQZRK:Rmn04mxaKXWQ/2aIDiJVuU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
301b0ea527920a3a5a0a32957342f0e0_JaffaCakes118

Files

301b0ea527920a3a5a0a32957342f0e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5eaac56b5cc7ffa727a8ab19da3d7d59

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
ExitProcess
CreateFileA
LoadLibraryA
LCMapStringA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegDeleteValueA
RegCreateKeyA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegQueryValueA
RegSetValueA
RegEnumValueA
RegOpenKeyA

Sections

.text
Size: 367KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ