0a16ec0293bf84c8d01472d6e97ea370_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a16ec0293bf84c8d01472d6e97ea370_JaffaCakes118
Size

180KB
MD5

0a16ec0293bf84c8d01472d6e97ea370
SHA1

bc621b87a0ace8071345afbf1cdf603aa75b4989
SHA256

86ff1ce291b951f569c3e1153f38061796597a91253660906397d15364ab764d
SHA512

74f4943b011500203e2ff6a61ed59c2501f3a18dce8f7d251ff081e7e6ebc40e82e50c4b8b87508603803407ea74e160e88fc2c72ec543f7a172a0209e9c55ea
SSDEEP

3072:2bTDjfSaBqZskYpuEkWoBhBWcDOm0b4sUp1VWC6v54PaJI8rkxR1qxKQgwAx:IDj5ZpudW+0bGMGSJI8YxRIPa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a16ec0293bf84c8d01472d6e97ea370_JaffaCakes118

Files

0a16ec0293bf84c8d01472d6e97ea370_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40cdd030b44ff021a3609bdf9d1f4b76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CloseHandle
GetCurrentProcess
CreateFileA
LoadLibraryA
LCMapStringA

user32

CreateWindowExA
CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow

advapi32

RegOpenKeyA
RegEnumValueA
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegSetValueA

Sections

.text
Size: 159KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ