08d33ebb711e5eb1dbf9b39b5f5bfa1b_JaffaCakes118 | Triage

Sharing

General

Target

08d33ebb711e5eb1dbf9b39b5f5bfa1b_JaffaCakes118
Size

185KB
MD5

08d33ebb711e5eb1dbf9b39b5f5bfa1b
SHA1

bdda54be7a9f69e76dbf4a142f180f63560fc0bd
SHA256

5b962e8d78517f727f36e83b0af896da7882feb0fa15d45f8f6885fe8bd1695b
SHA512

feb1c3118eb5a2c0c429f8e6a6f44bc3317c5bdf7ba30c7a07555107d2b25f89670842fa083cd190a0cc3e39636e316bb6f0c0b5a16117bdf1887746cb02e5a2
SSDEEP

3072:CDUGAsWjJ9JcjtTVIGsZBvjcXYmSCRIHJkCCkZTtmT5nxWD9vA/Stu:CDUGwN9CJTVIGsZCY4SPCkBwT54Ri

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08d33ebb711e5eb1dbf9b39b5f5bfa1b_JaffaCakes118

Files

08d33ebb711e5eb1dbf9b39b5f5bfa1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

19d68e00fd8c723b68fde61350f7e38b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
LCMapStringA
LoadLibraryA
CreateFileA
ExitProcess

user32

wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow

advapi32

RegDeleteValueA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegSetValueA
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ