0aa13e5e5f001bdc5a203f7809b6f9ee_JaffaCakes118 | Triage

Sharing

General

Target

0aa13e5e5f001bdc5a203f7809b6f9ee_JaffaCakes118
Size

3.5MB
MD5

0aa13e5e5f001bdc5a203f7809b6f9ee
SHA1

edd55c34fc9f788af5f36f176af0b19ea3d8b472
SHA256

8ffe62a9d68beb185720ae6f37d2702eeb0dd3c9845412ba4301d2ca3b4a41a2
SHA512

43508ba3f5269df9e316b17df8eb22f1bbc46c73aed9a14676404261a9aba6674683de7f119109bb40ec938cf56123221b6a24b23246f79f324c25b460bea7d4
SSDEEP

98304:AF1qy1PpR+NZw3RV686l8tqQW6O0ShNZ9TaEiaJCJ:AP1xR+NERVcStqO9Uv6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aa13e5e5f001bdc5a203f7809b6f9ee_JaffaCakes118

Files

0aa13e5e5f001bdc5a203f7809b6f9ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4381f29e4af017f26f16e7e739c4614a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
LoadLibraryA
ExitProcess
CreateFileA
CloseHandle

user32

CharLowerBuffA
SetWindowLongA
CloseWindow
CreateWindowExA
wsprintfA

advapi32

RegCloseKey
RegEnumValueA
RegEnumKeyA
RegDeleteValueA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegQueryValueA

Sections

.text
Size: 4KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ