3fd7d48de7384d571c9d1afc11d57eb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fd7d48de7384d571c9d1afc11d57eb0_JaffaCakes118
Size

296KB
MD5

3fd7d48de7384d571c9d1afc11d57eb0
SHA1

0e19bae7c4435173b7f269a3a0fc0e762d67ffe4
SHA256

df0747f98fbc38188e839b29c32b9d7f13cd42710672f15341aad982954ff513
SHA512

c43f70be80821431c316f9e2b095da09092acfed481521a47261579736fe28df90cf8674138ec23743e607b2e4b27c546d122337056996da2de7c79d96d44e12
SSDEEP

6144:MnZx+LszsScfBtXBrMlHra73MQc+vra/vsH8Hp5h:MnZxTVaBtVMlHrQMQc+ck2pT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fd7d48de7384d571c9d1afc11d57eb0_JaffaCakes118

Files

3fd7d48de7384d571c9d1afc11d57eb0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b28773da529fddfc6bc09bc961b5a7a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
ExitProcess
GetCurrentProcess
CreateFileA
CloseHandle
LCMapStringA

user32

wsprintfA
CloseWindow
CreateWindowExA
SetWindowLongA
CharLowerBuffA

advapi32

RegOpenKeyA
RegCreateKeyA
RegEnumKeyA
RegSetValueA
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegEnumValueA

Sections

.text
Size: 276KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ