0f23e39ffb4a3716e11c634d96244f99_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f23e39ffb4a3716e11c634d96244f99_JaffaCakes118
Size

272KB
MD5

0f23e39ffb4a3716e11c634d96244f99
SHA1

90a9c9db65c2beb098f96c7e935e4d6f1a81a8a4
SHA256

39fd987950ba53af28e46c5a1a9807fa87fda72a34cce6675d423bf25e16c925
SHA512

3697af816cf98bb5f42a921b4d4dc6e0c2212a06a1945d66327939bf16635cbc42b5631b49ca881e717100e5ed5cf3675e7fcd0e20929114b8467f99c54021dc
SSDEEP

6144:qZM28H2wxoyHbise6kyEa7rkWBm7zsdsjYHL:I85djezgm7zsdskL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f23e39ffb4a3716e11c634d96244f99_JaffaCakes118

Files

0f23e39ffb4a3716e11c634d96244f99_JaffaCakes118
.exe windows:4 windows x86 arch:x86

db58909e799943ce9719eff86bb3d02f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LCMapStringA
GetCurrentProcess
LoadLibraryA
CloseHandle
CreateFileA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegOpenKeyA
RegCreateKeyA
RegEnumValueA
RegSetValueA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegQueryValueA

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ