c182330646efeee20ef10d6530c69498_JaffaCakes118 | Triage

Sharing

General

Target

c182330646efeee20ef10d6530c69498_JaffaCakes118
Size

628KB
MD5

c182330646efeee20ef10d6530c69498
SHA1

10cdd9bd7c74518c21474377734d531fc27ed3cc
SHA256

4ba1e723f51be5955e65500686d272bdb02fbb214e045d0fa78988ed62632f10
SHA512

bfe90ea2a037c71a59cdffebe6879c36a23e11f037481bbc3d93c30c2016c8710b76386309c6ce36afcc19415c0543a9806a74ba3d4bfc3ab76c6a0cd4eedb12
SSDEEP

12288:3OvkDpnp0t8uejbO4PfLPBCMlQ8BLej8elM:ecFnpiCjbTfz1y8Qj4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c182330646efeee20ef10d6530c69498_JaffaCakes118

Files

c182330646efeee20ef10d6530c69498_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30a504d6e3e78c543a79f0bde4f6de40

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
CloseHandle
LCMapStringA
CreateFileA
LoadLibraryA

user32

CreateWindowExA
CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow

advapi32

RegDeleteValueA
RegCreateKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegEnumValueA
RegCloseKey
RegSetValueA

Sections

.text
Size: 574KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ