442625ceb0a7cb3c6a57c30c6ac4ba26_JaffaCakes118 | Triage

Sharing

General

Target

442625ceb0a7cb3c6a57c30c6ac4ba26_JaffaCakes118
Size

464KB
MD5

442625ceb0a7cb3c6a57c30c6ac4ba26
SHA1

eab3896ef668df53aae3db044dff9ff7892ad98c
SHA256

f99de4ca8be78b25bf6584eea5232adaa1bc07426faa7b5ecd6518a5a6ba8977
SHA512

c6abdddc9b5492259d163fa711022184cb5b49672d574887f47b0cee6c009d9c615e8c3d108d79859bd6c633d76364e3d242f9c484635526f32db26d727eb3b9
SSDEEP

12288:xf3o/0XXUggUnkyW8k2oUlCiiSGUqaUt7ln:xz5gQrRk2o9iXOh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
442625ceb0a7cb3c6a57c30c6ac4ba26_JaffaCakes118

Files

442625ceb0a7cb3c6a57c30c6ac4ba26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

07533e60f5e2b803a259b7697f1dd17e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
LoadLibraryA
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle

user32

CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA
wsprintfA

advapi32

RegEnumValueA
RegQueryValueA
RegCreateKeyA
RegOpenKeyA
RegDeleteValueA
RegSetValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey

Sections

.text
Size: 441KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ