1af4e49027526a2cf32fdf1539def531_JaffaCakes118 | Triage

Sharing

General

Target

1af4e49027526a2cf32fdf1539def531_JaffaCakes118
Size

436KB
MD5

1af4e49027526a2cf32fdf1539def531
SHA1

f04b383b23f4205a749fd81c30869471f7f49b4c
SHA256

9262d011612b92bbb06f04251463db5acf780b9042e415ed4142e359e1be456b
SHA512

dafd107f98f25173a727e2c6b8ee6a7bc6db3b381b879e8ffdb8cf5d2cc80bb0921f85befe78db7df04b81165369e8c38a1b5dcd65de8c74313dd5c06f34a60c
SSDEEP

12288:7HxCz1zdsj7tO3dVsRyLjknxhV0T+6sPHDZttdZtj:LxAd0O3dWyEnsfE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

1af4e49027526a2cf32fdf1539def531_JaffaCakes118

Files

1af4e49027526a2cf32fdf1539def531_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e3cdd249e9e2f687d464e11eab56223e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
CloseHandle
CreateFileA
LoadLibraryA
GetCurrentProcess

user32

wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow
SetWindowLongA

advapi32

RegEnumKeyA
RegQueryValueA
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueA
RegEnumValueA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 391KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ