1ac1e3a0c3a89b9b68edd643cbd31c84_JaffaCakes118 | Triage

Sharing

General

Target

1ac1e3a0c3a89b9b68edd643cbd31c84_JaffaCakes118
Size

356KB
MD5

1ac1e3a0c3a89b9b68edd643cbd31c84
SHA1

1cf6e58fdbe469fd407c609b1d8fb937dc19beb7
SHA256

465df717a695839c99130b55a93d42a45c1c9102d9c31d6268635e188246c11c
SHA512

55132fe4f5c2461a7e23917553d41ba43e999506109aaab2e9633f3b843f8b21a320354262a24a2cb47c99038a36863d26c45e6d8382d5fca625a4f7027f18e5
SSDEEP

6144:kYfr7UVj6F1KvDTFISAW1RJd0WvDQFY3/T9tofBTaEmHjKZHSwFj+jo:VsW3KvDTDf0SMFYPZufBTzIjy5+jo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ac1e3a0c3a89b9b68edd643cbd31c84_JaffaCakes118

Files

1ac1e3a0c3a89b9b68edd643cbd31c84_JaffaCakes118
.exe windows:6 windows x86 arch:x86

180ecf1d475216db8782bd03dc9a51f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
LoadLibraryA
ExitProcess
CreateFileA
GetCurrentProcess

user32

SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA
wsprintfA

advapi32

RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegEnumValueA
RegQueryValueA
RegSetValueA
RegEnumKeyA

Sections

.text
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ