JaffaCakes118_7c8d56327cf6f5e5c58e1f7fdfc0e6ad | Triage

Sharing

General

Target

JaffaCakes118_7c8d56327cf6f5e5c58e1f7fdfc0e6ad
Size

428KB
MD5

7c8d56327cf6f5e5c58e1f7fdfc0e6ad
SHA1

07fd74ac60ea30dfb9cfe0b6ae957811832f6715
SHA256

248c5ec74aa13590f61e9368b7d7db8b514bdbb8bcb07ff69778e734b515278c
SHA512

532bfbcbe6c798fb5f5a2f30becf26b52ed4a7d2f3f4787c86e0977bb5a290bed1b07dc41d6977b0ebedf94d8baa9225af7e946bc834f317449e2f1dc36154f0
SSDEEP

12288:ECchz7QWAybsWbD0fvFoOJdWdDu7/GoVobKHR:tchz73ZbsW6JJd4Du7OoVobKx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7c8d56327cf6f5e5c58e1f7fdfc0e6ad

Files

JaffaCakes118_7c8d56327cf6f5e5c58e1f7fdfc0e6ad
.exe windows:4 windows x86 arch:x86

2cd79dd4c82878a4bb675a81fb8fc6d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
LCMapStringA
CloseHandle
CreateFileA
ExitProcess

user32

wsprintfA
CharLowerBuffA
CreateWindowExA
CloseWindow
SetWindowLongA

advapi32

RegDeleteKeyA
RegCloseKey
RegEnumValueA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegQueryValueA

Sections

.text
Size: 409KB - Virtual size: 412KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ