4509d9ea151e1f711190d6ce90c21407_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4509d9ea151e1f711190d6ce90c21407_JaffaCakes118
Size

608KB
MD5

4509d9ea151e1f711190d6ce90c21407
SHA1

92477217526fccc62f06520c0577feade0f7c271
SHA256

e5e1cb7b4bdd122d86b117afa3f27157878c54aeff67c43d5d37d997cdf7b9af
SHA512

6943f600f1af1ce5b2104c918d1a564b5578229c272b846ccbcb093dc7e287f10a226e6c909d143e3b5690774a4dce27536b217ed03a8a2786680315b5312ed7
SSDEEP

6144:C3K1oAwodTrjCSKzChPoFam6qafnibwKdbw/K5NS+IxDZuFQq3xV5:v1oLoJCSKsWamAisK1aK5Nebuzf5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4509d9ea151e1f711190d6ce90c21407_JaffaCakes118

Files

4509d9ea151e1f711190d6ce90c21407_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04cc88931f08b7e2435baa430a6637cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
ExitProcess
GetCurrentProcess
CloseHandle
LCMapStringA

user32

CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA
CreateWindowExA

advapi32

RegSetValueA
RegCreateKeyA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegEnumValueA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyA

Sections

.text
Size: 242KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 288KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 352KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ