0b55901a87522b18bb6d3e6dacab741f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b55901a87522b18bb6d3e6dacab741f_JaffaCakes118
Size

212KB
MD5

0b55901a87522b18bb6d3e6dacab741f
SHA1

96c1037940c40990f72f9e4c50a1320eaef6d371
SHA256

65522a88adc8bdc73ef6e0fad8a5e48e948de27f2370b783a01e011c3c5e8288
SHA512

235b1ea8dcf3bee261811489fe72dad0c067866f8211ddaaccda80bcddf66e6082f1edc363a57d2e2565a592511583f4d9a390e68b2f77a3f8d8aa8229c3d018
SSDEEP

6144:IRDOh6ToO8ozalmRGNLLVdRTpZ3P0Kf1D0hwL:cah6TZ8calmROL5b/0KmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b55901a87522b18bb6d3e6dacab741f_JaffaCakes118

Files

0b55901a87522b18bb6d3e6dacab741f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

46a2782595358339aedc7855c21ccf27

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
LoadLibraryA
LCMapStringA
CloseHandle
CreateFileA

user32

CloseWindow
wsprintfA
CreateWindowExA
SetWindowLongA
CharLowerBuffA

advapi32

RegCloseKey
RegSetValueA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA
RegCreateKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA

Sections

.text
Size: 194KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ