4531f8b65d9c7be0bef2e8171e37093c_JaffaCakes118 | Triage

Sharing

General

Target

4531f8b65d9c7be0bef2e8171e37093c_JaffaCakes118
Size

164KB
MD5

4531f8b65d9c7be0bef2e8171e37093c
SHA1

5c8f7ae12191907b6a6cda959f224877083904b9
SHA256

ef38f7b77e5b9cca5f057102a10b04f9f041b72baa55e8503fc11421663aa3cb
SHA512

f4d33a2886fa9953b9c0190893b1ad621c6ebfc4b0eb05386d69a3b4f3c53b99f8089cc5999f9138eece99accc822e3c62e02670fd46f2c04083443ca83e7d52
SSDEEP

3072:Ep458vCRo+mgE9JHQ/2G7YfHa15g3MYsZYfdfmOs3NsxEfKuV/bA:Ei8vC9R6JHIKx3Mo43mxsKeE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4531f8b65d9c7be0bef2e8171e37093c_JaffaCakes118

Files

4531f8b65d9c7be0bef2e8171e37093c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f31ce70be0db3fcfa02033465b88ec3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
LoadLibraryA
GetCurrentProcess
CloseHandle
LCMapStringA

user32

wsprintfA
SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegEnumKeyA
RegSetValueA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ