4a017153137b46588f0ac4a2d8ef391b_JaffaCakes118 | Triage

Sharing

General

Target

4a017153137b46588f0ac4a2d8ef391b_JaffaCakes118
Size

392KB
MD5

4a017153137b46588f0ac4a2d8ef391b
SHA1

61e959c146a77dcbe88543acfe1c4a394d955f02
SHA256

416f3ce7e61ad8b0525900af37ec55f338ad1b25fbf40924f3679613266900b6
SHA512

d3f1418a8878fb76f3eb910cfebed3362a4504b3f2650a9a5d7ff04d3e1cc697ceebc2ce2ad72de782523e0cfeba4478196edb712e65843ba94b8ddad84e7a02
SSDEEP

12288:nXPquxc/q+JboYnApigGcmAK26vaMFE84xJ:ydRsYn2iomAK7CEEPJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a017153137b46588f0ac4a2d8ef391b_JaffaCakes118

Files

4a017153137b46588f0ac4a2d8ef391b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc0f7df02c11d71632d2dc9aa4f1e4f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
HeapFree
HeapCreate
ExitProcess
LoadLibraryA
HeapAlloc

user32

CharLowerBuffA
CloseWindow
wsprintfA
CreateWindowExA

advapi32

RegDeleteValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA

ole32

CoInitialize
CoInitializeEx
CoMarshalInterface

Sections

.text
Size: 304KB - Virtual size: 871KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE