18da8cfd45f5aa88b093310b6201ba6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18da8cfd45f5aa88b093310b6201ba6e_JaffaCakes118
Size

164KB
MD5

18da8cfd45f5aa88b093310b6201ba6e
SHA1

9792318a6b4c603b413bd07f00b2fc15fefc7659
SHA256

0a3d190cccbdb97c63c6236b9e03005469c59325e73b53bccdb1d5810aaba4ce
SHA512

b4b201e62a6f9d6e6f4e10ba0cb0a978ac1567367c8dfd606e98d7ff119a834d99e0729703a1317f651901ba50b393f4dcabd453310a0aa863961a3a664c5bf4
SSDEEP

3072:i3844fGmNVCAaUv3w5SvENQIsfoDZbbsLeNWuWmEzwFoxJYNddP:K52hcsg4vEa8Dpb2bbwFGJYNdd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18da8cfd45f5aa88b093310b6201ba6e_JaffaCakes118

Files

18da8cfd45f5aa88b093310b6201ba6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc686400917152c5fe9bb4b92556eaf4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
CloseHandle
LoadLibraryA
CreateFileA
LCMapStringA

user32

SetWindowLongA
CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegSetValueA
RegOpenKeyA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegDeleteValueA

Sections

.text
Size: 144KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ