5c70f5d3c68bd06b0fff11c3c69303df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c70f5d3c68bd06b0fff11c3c69303df_JaffaCakes118
Size

489KB
MD5

5c70f5d3c68bd06b0fff11c3c69303df
SHA1

2d12faf26316db1e72be836db137b73ce4eeac2c
SHA256

c8f4736d1b4d14a98b9ee97889842a4812cc7c8b6f32c3a5e2526737ca152bcf
SHA512

58f5a38ca1e56638f6aafe5d6759c9c10a802d5bc76ab6c8f74992f44110478670ab024b20bb173350ad9d2c47b9fdb0be27161530be82ffcef9bd82b1ade8c5
SSDEEP

12288:cORTgy/z7AIec4C1iSV7BGGij4dsojqDjsuTOi95/Wm:cORkyr7AIexCHVc4CEqX5N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c70f5d3c68bd06b0fff11c3c69303df_JaffaCakes118

Files

5c70f5d3c68bd06b0fff11c3c69303df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2fcfb66de8d747c2d64da141ee1bfb30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
ExitProcess
CreateFileA
GetCurrentProcess
LCMapStringA

user32

SetWindowLongA
CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA

advapi32

RegDeleteKeyA
RegCreateKeyA
RegEnumKeyA
RegOpenKeyA
RegCloseKey
RegQueryValueA
RegSetValueA
RegDeleteValueA
RegEnumValueA

Sections

.text
Size: 468KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ