0f0d4c56c129c1363a13a914c0c0b848_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f0d4c56c129c1363a13a914c0c0b848_JaffaCakes118
Size

244KB
MD5

0f0d4c56c129c1363a13a914c0c0b848
SHA1

916f9db431ba2eb45a974f17c10b9cacf3ee8f98
SHA256

5ab31b0b08b14428de55abdbb985073bba25d16d7a5b8d0751663c2600fe5e4b
SHA512

568a01d27219eb7b7805639dd6c6342ea4b9583123c86e98a253a5646563139d07c5500612468f0d65731661b4b8531adf1cddf060dc5b320f0bea9af0e691f5
SSDEEP

6144:drVlIlH3AWZVmpJJPUxRnalaFT36wU1mMn:xIFwpJJPsAQKwpMn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f0d4c56c129c1363a13a914c0c0b848_JaffaCakes118

Files

0f0d4c56c129c1363a13a914c0c0b848_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e07aa710ff116577f0648eb15faab1c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
ExitProcess
CreateFileA
LoadLibraryA
LCMapStringA

user32

wsprintfA
CloseWindow
CreateWindowExA
SetWindowLongA
CharLowerBuffA

advapi32

RegOpenKeyA
RegCreateKeyA
RegEnumValueA
RegEnumKeyA
RegSetValueA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 164KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ