3a1fe77d7e2bad8a8d59812c3e40b6a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a1fe77d7e2bad8a8d59812c3e40b6a8_JaffaCakes118
Size

172KB
MD5

3a1fe77d7e2bad8a8d59812c3e40b6a8
SHA1

c7f877b9fb21623e0106ddce8b014771cc34f9be
SHA256

fa13138334d08f777c17a3829ce0cde3b41dd99e0c9d3d8ecccf6a2e7ce58e4b
SHA512

22d5f8f985d1c1a3a377f81319fd65c01f3d427779c567f96ffa883f803a12db1a96b10799e537d6a6f9a163b905966401c3d23977d47a29e380cb79aaa70b13
SSDEEP

3072:WVOCcrlo5BVIi5TvVIhBEUoEC4E8eD6LKZiBsd2NiKp3YzgQQRAJyEIgPHwv:WkfrlSIQOhBElD92LKEBEcV+zQR6yrg8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a1fe77d7e2bad8a8d59812c3e40b6a8_JaffaCakes118

Files

3a1fe77d7e2bad8a8d59812c3e40b6a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19dea9946cf2d8f2f69135a8e30cdacc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
CloseHandle
LCMapStringA
ExitProcess
GetCurrentProcess

user32

SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegDeleteValueA
RegEnumKeyA
RegSetValueA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 154KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ