0a744dcd51513be47b8b3abc5dc95226_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a744dcd51513be47b8b3abc5dc95226_JaffaCakes118
Size

144KB
MD5

0a744dcd51513be47b8b3abc5dc95226
SHA1

86a7dc4ff9521891f02dc8e64b0e182e52ce9bc8
SHA256

d5150a95d17910ee9a4a7eb7cf1403d302f639e106cafdd05f38500795f6a9ee
SHA512

c95ef872a8ce5ebf95e429dd097b32690a074ce81e1a4ca2471d1206b2ecd48d2fbaa4c272fa559cb3070775fd8d6bde5aa89f88a6aac444915e0ab0e8cf74ee
SSDEEP

3072:nLwp5IDryc5IGh5SBJJzsVZuDA/O8qNkwIW+MdMg7w5:nL26qc5IGenqVQDA/CNkv23i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a744dcd51513be47b8b3abc5dc95226_JaffaCakes118

Files

0a744dcd51513be47b8b3abc5dc95226_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5645b7ce4f911db050b4c54e912b1840

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
CloseHandle
CreateFileA
GetProcAddress
LCMapStringA
HeapAlloc

user32

CharLowerBuffA
wsprintfA
CreateWindowExA
CloseWindow

advapi32

RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegDeleteValueA

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

Sections

.text
Size: 48KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE