0f8475f72a66d851a6db021986663f00_JaffaCakes118 | Triage

Sharing

General

Target

0f8475f72a66d851a6db021986663f00_JaffaCakes118
Size

392KB
MD5

0f8475f72a66d851a6db021986663f00
SHA1

e53d028967af7b83c1f659260a14bc9f6585cddc
SHA256

212f3de7e3370e5007581cc707e4be4312d2e0087f11ea9439d299257da84b5e
SHA512

f711ef710089e118929ae77284c76078eec95c227fee719650462b04e826cf3885fd322ff1779e9cbb3fa40dd1a84a0b1768ce46aca736e61d58590cbc5088f6
SSDEEP

6144:Nm0ozD7YHDA1kzZJRVyJQh/Ds1TMxCVnGOFbbfCiCohnHPrG6Yna65OBZ744Z:naDcA1+5/KMuGOsiCohr1YnuBJhZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f8475f72a66d851a6db021986663f00_JaffaCakes118

Files

0f8475f72a66d851a6db021986663f00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e2fa2ece409ddc2339d9e599c74890f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
CreateFileA
LCMapStringA
GetCurrentProcess
CloseHandle

user32

CharLowerBuffA
wsprintfA
CreateWindowExA
SetWindowLongA
CloseWindow

advapi32

RegQueryValueA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegOpenKeyA

Sections

.text
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ