56005559d06445b53ebac2fd731cb453_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56005559d06445b53ebac2fd731cb453_JaffaCakes118
Size

185KB
MD5

56005559d06445b53ebac2fd731cb453
SHA1

91f752c0277c0110c411fdebb42e7fed03a3d4d1
SHA256

05dcc3bab4b4cb9b4ab570360c1192c47127bc91a3029bc9c960fb46d5e40a01
SHA512

cb08b061e6421f3dfb9cc50335c3e63a6a1a128a4c5b0e961848a32572a220b2d72bcb7cdebf2f81c5f15aa8a81e33b6815232c2ed08bca16cdd370bf93b8ed3
SSDEEP

3072:CV2TwRA46EW7KZq52s0hoRMYF+GanneYagI17mHMsZeDinbbs8NM1qWHSYR+uQjn:LkA+Zq52tC7FCax1oCiPLmj8NufV0hr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56005559d06445b53ebac2fd731cb453_JaffaCakes118

Files

56005559d06445b53ebac2fd731cb453_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8fa3eb97b0520600d22d83e483c08504

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
ExitProcess
CloseHandle
GetCurrentProcess
LCMapStringA
LoadLibraryA

user32

CreateWindowExA
CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA

advapi32

RegCloseKey
RegQueryValueA
RegCreateKeyA
RegDeleteKeyA
RegSetValueA
RegOpenKeyA
RegEnumValueA
RegEnumKeyA
RegDeleteValueA

Sections

.text
Size: 158KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ