295eb8fded6ccfafc7aea39a1131bffe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

295eb8fded6ccfafc7aea39a1131bffe_JaffaCakes118
Size

642KB
MD5

295eb8fded6ccfafc7aea39a1131bffe
SHA1

8097b4ec1a9ec10ab5430fe4ec5481805c704f61
SHA256

9923b36d002e07a600d47c13edbd18a858e77633e9560f01e7bf4dd53bdcb338
SHA512

86fbbd39f35aae3347a7ae176c30d1520d82223c3f1036a91ae75beec3627fe60658e7691a2af98d26989599376a419e8360c51076472f3680029a0632815210
SSDEEP

12288:UFoTCm/VoYfB1c+gAHPHPEJcB41uZUfP4lYJANXU+XdFt9YBaWg:Utm/VoynfPEQFgeYJA59t9S+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
295eb8fded6ccfafc7aea39a1131bffe_JaffaCakes118

Files

295eb8fded6ccfafc7aea39a1131bffe_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8dd9612e9cbe30d0a3ec2468f1f6a6ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
CloseHandle
LCMapStringA
LoadLibraryA
ExitProcess

user32

wsprintfA
CreateWindowExA
CloseWindow
CharLowerBuffA
SetWindowLongA

advapi32

RegDeleteValueA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegSetValueA
RegEnumKeyA
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 512KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 196KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ