d258470d532e4862e1b83afe624eb15a_JaffaCakes118 | Triage

Sharing

General

Target

d258470d532e4862e1b83afe624eb15a_JaffaCakes118
Size

688KB
MD5

d258470d532e4862e1b83afe624eb15a
SHA1

f8bd9184b901fb5fadaa145702eac516814f4397
SHA256

85a625a3480d944b9a0e5584920262f8598b34fa040d379bc0804dec4ad74662
SHA512

965d2fa0a646b60b5148d59a7d2940cdff7d0485cc8f8bb10ba5103df3d9b7baf628c7856515862001c59d7415b1381efc221a0b6f2e50c844d2b1701691438a
SSDEEP

12288:lhV2QN6XairS8eJZqnDrYKiEaF6/jFFRX9zn3h:Bbi2FIIRZ6/jZXhR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d258470d532e4862e1b83afe624eb15a_JaffaCakes118

Files

d258470d532e4862e1b83afe624eb15a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ac803e94a60364b26a6d23fe317219f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
LCMapStringA
CloseHandle
GetCurrentProcess
ExitProcess

user32

SetWindowLongA
CharLowerBuffA
wsprintfA
CreateWindowExA
CloseWindow

advapi32

RegCreateKeyA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegEnumValueA
RegSetValueA
RegQueryValueA

Sections

.text
Size: 634KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ