d2e24c095f83bf4d2a857dcca869e912_JaffaCakes118 | Triage

Sharing

General

Target

d2e24c095f83bf4d2a857dcca869e912_JaffaCakes118
Size

696KB
MD5

d2e24c095f83bf4d2a857dcca869e912
SHA1

a19566c3300e165b617fe3fe31c1cdeb36a72e01
SHA256

8a6f543aa37108c3cb0759307ea36fdfb41426d5effec3f4bca88fc594ee5804
SHA512

ca7ab116dd8be79dc4f53372e27c393d5bcc5baff8a66040d7d56b41eeef6d83f5c5996d40407619d5d78f288d7bce9d7b3702de67f08887a9a4157db3455645
SSDEEP

12288:ZVImq2YQPXIDgh85oJbvlQpFS6H2A2/DVqaHFldotAOO4Vy:ESfpSsbvSFfH2//MedUy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2e24c095f83bf4d2a857dcca869e912_JaffaCakes118

Files

d2e24c095f83bf4d2a857dcca869e912_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e8b2a0873e9259d8cbbd7c05c703b2b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
GetCurrentProcess
CreateFileA
LoadLibraryA
LCMapStringA

user32

SetWindowLongA
CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegCreateKeyA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
RegCloseKey
RegQueryValueA
RegSetValueA
RegEnumKeyA
RegOpenKeyA

Sections

.text
Size: 578KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 236KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ