0cdf82004be17d1aa56c73e4f4137eda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cdf82004be17d1aa56c73e4f4137eda_JaffaCakes118
Size

776KB
MD5

0cdf82004be17d1aa56c73e4f4137eda
SHA1

0e12cfa9560c3f92a97a1d7276a9d98cbc1d157b
SHA256

14b16c2632c39d72259dbda656c7ef2b6f0a0ff906c3f874a7d2e97f6d67fd2a
SHA512

017658d375b69621eaa6bf1d3a7a50ff89f5583cfe1746035e6246fb2fb4bbba014fcc7c51d66986f0aa51c559fb50e44316595e280c9e59e6a5db6436a77f77
SSDEEP

24576:dVph+6TdLwf6usZGYJDJoF+rqyhhrurGGH:dL/TdL26uIGY90++yKKm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cdf82004be17d1aa56c73e4f4137eda_JaffaCakes118

Files

0cdf82004be17d1aa56c73e4f4137eda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c71138d76053b7149c74df7b588610f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LCMapStringA
CreateFileA
LoadLibraryA
GetCurrentProcess
CloseHandle

user32

wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegEnumKeyA
RegDeleteValueA
RegEnumValueA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueA
RegOpenKeyA
RegQueryValueA

Sections

.text
Size: 755KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ