JaffaCakes118_1b419d4159ded45f22772b603edcab81 | Triage

Sharing

General

Target

JaffaCakes118_1b419d4159ded45f22772b603edcab81
Size

400KB
MD5

1b419d4159ded45f22772b603edcab81
SHA1

df285c990d0a1628fe033a819b633ad22c1d20a3
SHA256

f436718e43088aebeb760f9fc661e40d0b926089088ceb9fc43f0efba5428ba0
SHA512

e65f7426d6d67a1dbec80f0b0084557547646eb96a31fc43cd1cae9791e812ad8f2782ddd5f159e2c1320836c8067f368229b1f494359908efe0661dbb9c19b1
SSDEEP

6144:d1gnI8BLd0GBGp+ULcEC+/wbHM4zy0Tvm5vRaz7obN1kuYt/C3rWQGSELb30FXpi:8I8BLRBmnAEC+/wOUIbN67cEbupcWYey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1b419d4159ded45f22772b603edcab81

Files

JaffaCakes118_1b419d4159ded45f22772b603edcab81
.exe windows:4 windows x86 arch:x86

9235d714471d138f6b1c731482dab7e8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA
GetCurrentProcess
ExitProcess

user32

CharLowerBuffA
SetWindowLongA
wsprintfA
CreateWindowExA
CloseWindow

advapi32

RegDeleteKeyA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegDeleteValueA
RegEnumKeyA
RegSetValueA
RegOpenKeyA
RegCreateKeyA

Sections

.text
Size: 380KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ