0f3a7d2c6c5f6aa93aec594a9bf10995_JaffaCakes118 | Triage

Sharing

General

Target

0f3a7d2c6c5f6aa93aec594a9bf10995_JaffaCakes118
Size

436KB
MD5

0f3a7d2c6c5f6aa93aec594a9bf10995
SHA1

df30a134373cce6ba625b297f2fb883b68b394e4
SHA256

e5d21e8a77177a0fb4277ee9dbeaa2709414b8a6034e8e9d4aa999afffa8f37c
SHA512

0423eca90bf7d2bf2416cbdea15b2c97e86292c098d2a0c505a4c3b54ad7fb3ca87ebbfde939c96727c99b54ffdc3d631cfe642364abfdb9bdcd83fb6610f95e
SSDEEP

12288:vWSbWO1oHkakTfNn3t9serU/5MA3cQmY/7rn5kkvbrB+97n:9CHPkT5997U/5pdNqAXB+9r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f3a7d2c6c5f6aa93aec594a9bf10995_JaffaCakes118

Files

0f3a7d2c6c5f6aa93aec594a9bf10995_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6a2c21de2f43aaa379a6e87a28ef92e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
GetCurrentProcess
CloseHandle
LCMapStringA
ExitProcess

user32

SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegEnumValueA
RegSetValueA
RegQueryValueA
RegCreateKeyA
RegCloseKey

Sections

.text
Size: 391KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ