10325bb2b521e14b55d9596a6d6256b5_JaffaCakes118 | Triage

Sharing

General

Target

10325bb2b521e14b55d9596a6d6256b5_JaffaCakes118
Size

376KB
MD5

10325bb2b521e14b55d9596a6d6256b5
SHA1

1ff4e77a3d731b6fd98e6a15ec4f78e44037cbeb
SHA256

d25ccad747c117825635cd16b46cc804c99be42c93a729324bd32d7721ba80d8
SHA512

efc163a444d279d30a83f6572f79a765d89f3659575b6d6b49bf0fb4379ea3812b9e07e0d949827cf05a770101302ca58f8cfd1725d39e8ac29b6edc2d8fab16
SSDEEP

6144:N8tMTY9y5tYROkIVqtBjQa2rgu/aC7pcxsEQvYP6UY4rQxw9M4Dp4PHloq:NkMp5sOkBxr2rbHpcxsEQQ6iQxYM4DpI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10325bb2b521e14b55d9596a6d6256b5_JaffaCakes118

Files

10325bb2b521e14b55d9596a6d6256b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2f98c5cb1e0deb2f2754691b3cec23f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
ExitProcess
CloseHandle
LoadLibraryA
LCMapStringA
GetCurrentProcess

user32

CloseWindow
CreateWindowExA
SetWindowLongA
CharLowerBuffA
wsprintfA

advapi32

RegDeleteValueA
RegQueryValueA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegSetValueA
RegEnumKeyA
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 349KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ