57561291a4d03be4c49c13bae51e0b2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57561291a4d03be4c49c13bae51e0b2e_JaffaCakes118
Size

185KB
MD5

57561291a4d03be4c49c13bae51e0b2e
SHA1

6e9f5370c63f301c1c0410244e2bbe1c0ac2c3f5
SHA256

b1b8144d418ec1352ed25d3035242617941b560c7cdd7cf645f850fae760f1fc
SHA512

08ced699c07abddc2935fbc99cdf019afeb3351b20d1cc479a1d26029447cf52d7ea2a64233035d6cd3dac2b9b3d98c1f306a3afd32f758097d0b9406c848c07
SSDEEP

3072:iBDF7IlvEcrLnlRgQXEpYiTMBiJwbohRiIaveS0thQcgfTxj+eKBbXMPoIXiQJzA:aQeGES1cJwshRitveS4mFfTdnKVXlfqU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57561291a4d03be4c49c13bae51e0b2e_JaffaCakes118

Files

57561291a4d03be4c49c13bae51e0b2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bfb36a19dce40acd8a2201b04951d49f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
LoadLibraryA
LCMapStringA
CloseHandle
CreateFileA

user32

CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow
CreateWindowExA

advapi32

RegQueryValueA
RegSetValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumValueA
RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegOpenKeyA

Sections

.text
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ