0b7080a15cc9ddfc17e68740420d13f9_JaffaCakes118 | Triage

Sharing

General

Target

0b7080a15cc9ddfc17e68740420d13f9_JaffaCakes118
Size

160KB
MD5

0b7080a15cc9ddfc17e68740420d13f9
SHA1

642261e41ac483e319b0bc3170c09f2420657e9e
SHA256

7174f1337a521bc6c218ad8890a7d2d1d306e5d6a0cfdf510e9dece32cecd53a
SHA512

1fc6cfc2e0ab39003be3729917eacae3f9e77ee626625be88be09278b3f979579de4efdf18c0c784ae2f8aaecfd12552efbf214ef30fa2607bdd75cc71600faa
SSDEEP

3072:w4p2Ck9rzW8Ya32jT1Le47f7klAhM0hcx2vzYV8IJUrLc:wRCk9rzjv32d37fQlAmd2vUqImnc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b7080a15cc9ddfc17e68740420d13f9_JaffaCakes118

Files

0b7080a15cc9ddfc17e68740420d13f9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

54f47e8241b3295e764d1afd653208d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CreateFileA
GetCurrentProcess
CloseHandle
LoadLibraryA
ExitProcess

user32

CreateWindowExA
CloseWindow
CharLowerBuffA
SetWindowLongA
wsprintfA

advapi32

RegDeleteValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegEnumValueA
RegCreateKeyA
RegDeleteKeyA
RegCloseKey

Sections

.text
Size: 140KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ