0affd29100cc27f43e8727d831329141_JaffaCakes118 | Triage

Sharing

General

Target

0affd29100cc27f43e8727d831329141_JaffaCakes118
Size

384KB
MD5

0affd29100cc27f43e8727d831329141
SHA1

21a1856ed74e942211c23a3a9a41e25e7f10f4a1
SHA256

eba56ca19d039c27f1d9cdd9943c5abbd685b5a3a788473f266322d8fddef0c2
SHA512

7d76916d927980e064c2aba94a74d48102d151d154627e45c8f7bf7a5635aa1adf4142ec68a4e1cd38efc133bb79fa1d121f341acf5c8dc95adbf39ffc21f94f
SSDEEP

12288:aqwCeZZN2zMWP7jA+pF40vuznK+A1Dl56+biLICZv:XeXN2zMr+344uzKPko1CZv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0affd29100cc27f43e8727d831329141_JaffaCakes118

Files

0affd29100cc27f43e8727d831329141_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2db93fb1a51fe3cb58bd56b5984dcba6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
CloseHandle
LCMapStringA
CreateFileA
ExitProcess

user32

wsprintfA
CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA

advapi32

RegCreateKeyA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA

Sections

.text
Size: 363KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ