07f9cd3643244d01831f12687aaef4a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07f9cd3643244d01831f12687aaef4a9_JaffaCakes118
Size

308KB
MD5

07f9cd3643244d01831f12687aaef4a9
SHA1

5bd484353adaf20fad2479333476ac412ebd4588
SHA256

0a2a4a35711649c57a350ad6dedfd9d5f83b849fc2e80dca5716078567229e0e
SHA512

127eaf21a64b6623b503aa658d1e633122997e80489d4074e6eda0a69d3acf6136916c9aa96c44442ce812d886099229bded7559a129520b0f13020eaae206dc
SSDEEP

6144:FsA90A5EdEQDRfUFizBge3kbrtJxfblLefUPKD3fNUcpCivcBoGWdajoHu:SyB5UNUeBZ3Sx6fUPKpVvveoGl1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07f9cd3643244d01831f12687aaef4a9_JaffaCakes118

Files

07f9cd3643244d01831f12687aaef4a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b7ed3e368e0ffd045e61b0bc577088ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
CloseHandle
ExitProcess
LCMapStringA
LoadLibraryA

user32

SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegEnumKeyA
RegDeleteKeyA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegEnumValueA
RegDeleteValueA

Sections

.text
Size: 284KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ