6ab098f3e33f4051c5a241d8a9e5a525_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ab098f3e33f4051c5a241d8a9e5a525_JaffaCakes118
Size

204KB
MD5

6ab098f3e33f4051c5a241d8a9e5a525
SHA1

6b2c5892e64024889e5750273fabea1c5f85de6d
SHA256

52569fa016a0d74fc62519390164a81859c823c4c93ce7842ee1504d8c8d2cc6
SHA512

9e3547d358229adff4bf72733641ed2086a9d0ac4a1581ecc7063c8051f956d1eb5aeaf40da0afedaed6fb41437e3b3ef5c5790bff2d518a3d3d32a9d5ff08e9
SSDEEP

6144:wpr6zqaGuHMga2pfMVvMO+5rPx1R6Bv7IBk:GSq3uHMMMVvI5rPB65EBk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ab098f3e33f4051c5a241d8a9e5a525_JaffaCakes118

Files

6ab098f3e33f4051c5a241d8a9e5a525_JaffaCakes118
.exe windows:4 windows x86 arch:x86

962c5e3a3c9974367705982221573be8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
CloseHandle
CreateFileA
LoadLibraryA
GetCurrentProcess

user32

wsprintfA
CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA

advapi32

RegDeleteKeyA
RegQueryValueA
RegDeleteValueA
RegCloseKey
RegEnumValueA
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyA

Sections

.text
Size: 184KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ