JaffaCakes118_b3017e01146ce9c1d52804a0453e1e8b | Triage

Sharing

General

Target

JaffaCakes118_b3017e01146ce9c1d52804a0453e1e8b
Size

396KB
MD5

b3017e01146ce9c1d52804a0453e1e8b
SHA1

e481a3dcd3c6084516df4555a33df21886858e57
SHA256

96387cbd8d2a19ee17124bded3425eb0bc33e2ced56638d8d57eaf6fd0b37e4c
SHA512

630bae901e989a68d011dd486e5b50a66d5b19e8809378bad091f88e744cb0092574ff7b40b9665a89377fd58cd988617fa1204d82f50e6f3dc11e4bd0e20596
SSDEEP

6144:ymNjYuKj/4pTNSbaKoyeuVln3HRC0Upt50VKqttqL3gsYm+YM/pn0qzOIi19Dlr1:7AOnKoyeO3HkbpgZsMj0h0nVn2PG4D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_b3017e01146ce9c1d52804a0453e1e8b

Files

JaffaCakes118_b3017e01146ce9c1d52804a0453e1e8b
.exe windows:4 windows x86 arch:x86

5d864d14e4ecca15f14de22de960f7d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA
GetCurrentProcess
LCMapStringA

user32

SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegOpenKeyA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegEnumKeyA
RegCloseKey
RegQueryValueA
RegDeleteKeyA
RegEnumValueA

Sections

.text
Size: 379KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ