5f1793d3ffb3795933fbc89a26af14a6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f1793d3ffb3795933fbc89a26af14a6_JaffaCakes118
Size

356KB
MD5

5f1793d3ffb3795933fbc89a26af14a6
SHA1

d9549074e85a42a6293730ce5774b99fd25b05fd
SHA256

6b7209dc4b89c3a82a7be457ff09734a4547e935d9ad0e336addba90f3a50626
SHA512

cb995b1ca2e655085b1bd0db3791260f5b760d40c4eb8edc76794bc8b1fcf9c47879f1157d30bd20d0aec0d2c0a23aeaafe279a8f4f32abbd0e0d955bfc6ea86
SSDEEP

6144:CN/SNNZ7+/EufNb0zEAlAgBarMg+5VYbKuXjFaWiHO8zGK3z4:CN/KO//F0JLYri5ybKuEWit3z4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f1793d3ffb3795933fbc89a26af14a6_JaffaCakes118

Files

5f1793d3ffb3795933fbc89a26af14a6_JaffaCakes118
.exe windows:6 windows x86 arch:x86

6f9651c96dd9672e711458ae491efde6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
LoadLibraryA
ExitProcess
CreateFileA
CloseHandle

user32

SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA
wsprintfA

advapi32

RegCreateKeyA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegSetValueA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 262KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ