5b09ea9e7469035fe32088356f1d887e_JaffaCakes118 | Triage

Sharing

General

Target

5b09ea9e7469035fe32088356f1d887e_JaffaCakes118
Size

144KB
MD5

5b09ea9e7469035fe32088356f1d887e
SHA1

33cfed3357bb3777e1502d0d181651abf9889e1c
SHA256

44d2fa8b893e8027a0e18715bff85e5456cf334f5cf277e92bbba0975448db00
SHA512

f469e7464440fac6d1ee80c8b35e76147f8290d639eaa71714cc41230d3c2608ca1d1e8dd24302b70b0671dd3537ff40833da10028ba6d940b915a209b5a9b1f
SSDEEP

3072:1HtSV59yv1MIKJPwgovlhKdv0QsqwjvxzL0CqNyxNUM1hfqR+:1HvePwgovX/Pl3pdwWhSR+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b09ea9e7469035fe32088356f1d887e_JaffaCakes118

Files

5b09ea9e7469035fe32088356f1d887e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5898c4879e0db2231fbfdbdf5d254ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
HeapAlloc
GetProcAddress
LoadLibraryA
RtlUnwind

user32

wsprintfA
SetWindowLongA
CloseWindow
CreateWindowExA

advapi32

RegQueryValueA
RegCloseKey
RegDeleteValueA
RegEnumValueA

ole32

CoInitialize
CoRegisterClassObject
CoUninitialize
OleRun

Sections

.text
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE