5c0e87c6c67684dfa0f3562cb1c34df0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c0e87c6c67684dfa0f3562cb1c34df0_JaffaCakes118
Size

250KB
MD5

5c0e87c6c67684dfa0f3562cb1c34df0
SHA1

61bcb2de8785bf7f36bee865315641f36483faed
SHA256

86c81ee9a9ed6a4d7a5016fbd3fdd312d397199c925258734a49ed5ce6342f5d
SHA512

f138d4d91116e75ff9ccb0735e4768a61434d17981dd6d0b7bcf642b7d84a37f66386b79e5293e8ae3aa214e6e8a3b67928308eb6ab15b38f501d75424e0c1dd
SSDEEP

6144:d/H+8pmvtzHm48oilMAOSf0XFdkzR9CnPYlto:dv+Ym1Y0AOSfaeR0nwfo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c0e87c6c67684dfa0f3562cb1c34df0_JaffaCakes118

Files

5c0e87c6c67684dfa0f3562cb1c34df0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d9ba53bf835231450978b14234475cc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
CreateFileA
LoadLibraryA
ExitProcess
LCMapStringA

user32

CreateWindowExA
CloseWindow
SetWindowLongA
wsprintfA

advapi32

RegEnumKeyA
RegEnumValueA
RegQueryValueA
RegCreateKeyA

ole32

CoRegisterClassObject
CoGetClassObject
CoUninitialize

Sections

.text
Size: 125KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 734KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 74KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE