JaffaCakes118_4e3357b8363c96d3c3cdec1c3dc13d81 | Triage

Sharing

General

Target

JaffaCakes118_4e3357b8363c96d3c3cdec1c3dc13d81
Size

395KB
MD5

4e3357b8363c96d3c3cdec1c3dc13d81
SHA1

d5acedd7f34b0b6142bb16ca523cd4308370ae1d
SHA256

716e138cb31d7e60ee7d2f46bf4b9bf7e0c2bb6a5e2e5c920e43b10509dd0b22
SHA512

f178363999e95e8bf48d175c007a74fb9336fcbc742b18708c2199de619d0f64de08238816fa72ce5b50069e3f42055de25d85d2d40382087e22e601c0911b54
SSDEEP

6144:JaYfxcx8J5uybal9CAig2df9dKWuOEyfFTRxnwffZ/TWu12BfcSn19H2:UaqxKMybb5KmHfF1xafdTihcSnDW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_4e3357b8363c96d3c3cdec1c3dc13d81

Files

JaffaCakes118_4e3357b8363c96d3c3cdec1c3dc13d81
.exe windows:4 windows x86 arch:x86

cfaca42da6e28b6951c2f2e6cab3dc7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
GetCurrentProcess
CloseHandle
CreateFileA
LCMapStringA

user32

wsprintfA
CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA

advapi32

RegQueryValueA
RegCreateKeyA
RegEnumValueA
RegSetValueA
RegDeleteValueA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 4KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ