60ef53ebb3efc3af9817d41b4ae8608d_JaffaCakes118 | Triage

Sharing

General

Target

60ef53ebb3efc3af9817d41b4ae8608d_JaffaCakes118
Size

200KB
MD5

60ef53ebb3efc3af9817d41b4ae8608d
SHA1

38b0e60ed301fae69910c510f1506bc8fdb50122
SHA256

028ee2cf85c292995adc06cb430c93f7cc9a71be16bd8244aa08db29d2c38553
SHA512

900989e8f61521bbee6597c13228218f30760123026928a0bf88a584f9bfac306a5359955e907b90cc5cf56141021a595411747ffc1917f3203a9b21e8408ee9
SSDEEP

6144:BGMhvxIjRiuFBf7TKAep4/z7NzBkP+Y2sCrSJDgpcc:BfhxkRiuFBzTKAepx+bmBtc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
60ef53ebb3efc3af9817d41b4ae8608d_JaffaCakes118

Files

60ef53ebb3efc3af9817d41b4ae8608d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

abde9c25426736ac94f9c55af265fb37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
GetCurrentProcess
LCMapStringA
CreateFileA
LoadLibraryA

user32

SetWindowLongA
CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegSetValueA
RegEnumValueA
RegDeleteValueA
RegCreateKeyA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA

Sections

.text
Size: 181KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ