5ce56cb6d0acea3287c0f1833295c47f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ce56cb6d0acea3287c0f1833295c47f_JaffaCakes118
Size

293KB
MD5

5ce56cb6d0acea3287c0f1833295c47f
SHA1

336e389cb8222760a04a5b59079d86be0a79aee5
SHA256

f06f6fbb3c440da6778ff60d0ede176ad7f5b1a0ee22d437bde949da3b683b54
SHA512

fdfa2f9dca260d93aa227728f00421d40d3d4cf57461cdf77a1a53ded32e9b27cee8f5900d814da093d37fbc591b88f53305836587e5344c51bf5e76849cdd3f
SSDEEP

6144:yKr5cYU5+0srL1ysmPN0TWnSrZa8ufxN7xMn9VCGwcD3T+:y2U5tshTSCWxNVxcX+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ce56cb6d0acea3287c0f1833295c47f_JaffaCakes118

Files

5ce56cb6d0acea3287c0f1833295c47f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c16af3f1adbf4617d1c5b744022b144

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
Heap32ListFirst
Module32First
VirtualProtect
CreateFileA
WriteFile
VirtualFree
Sleep
VirtualAlloc
Heap32First

user32

GetMessagePos
PostMessageA

wininet

InternetCloseHandle
FtpPutFileA

ole32

CoInitializeEx
OleInitialize
CoInitialize

advapi32

RegQueryValueA
RegQueryValueExA
RegEnumValueA

Sections

pQHMAlld
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

FRVcGBkN
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DXfFzsTj
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RPgrnVsM
Size: 258KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE