5a8c375e08d1b1f5c6bfaff43aaca749_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a8c375e08d1b1f5c6bfaff43aaca749_JaffaCakes118
Size

484KB
MD5

5a8c375e08d1b1f5c6bfaff43aaca749
SHA1

65e713b3726596b8a9cbe53306aebe71e9c22acd
SHA256

e7952326f15b7a0bc4ba5414fc9a2b62e4a93b6af8d275f5c1a0c2a94955020b
SHA512

31872a653e8571eec0b8857a15730b4e99f052157055b5f538606390f9be42dda9835de11484c395ec8a421629ea1d4675deea170954cadc2bbd4fc30e6ac44b
SSDEEP

12288:2C2i4cUdYqvXLZNMbghlBPgm/p5TF5eLj1MXH:12mUOibUb8PgGa16

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a8c375e08d1b1f5c6bfaff43aaca749_JaffaCakes118

Files

5a8c375e08d1b1f5c6bfaff43aaca749_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15f36fa4b3c7162a3159f480b27a305c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
ExitProcess
GetCurrentProcess
CreateFileA
CloseHandle
LCMapStringA

user32

CreateWindowExA
CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow

advapi32

RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegSetValueA
RegDeleteValueA
RegEnumValueA
RegCloseKey
RegEnumKeyA
RegQueryValueA

Sections

.text
Size: 466KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ