6f114e9e6ff1e20e5e1f33b59a85e030_JaffaCakes118 | Triage

Sharing

General

Target

6f114e9e6ff1e20e5e1f33b59a85e030_JaffaCakes118
Size

400KB
MD5

6f114e9e6ff1e20e5e1f33b59a85e030
SHA1

093020b300f9db90060bb0fad931208d22ec9edd
SHA256

caf8a4792b3f280d5388f7ad7f0b915c5633fd588bd9b00bb4b674e99c4c89ea
SHA512

b71b5878b2757e549b8ca365b3d75368d93ca1dfb6b8ba9a95aadc50d9039f0352550baca2f6447de0101f9b5d07701c920429d82307d4f5bd41a1625fb1ddfd
SSDEEP

12288:uwm0OUI8bf3rn0eJaMYMByjAXWGkX5ErF:k0bIEf3ACNYMojAXWGkX5ErF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f114e9e6ff1e20e5e1f33b59a85e030_JaffaCakes118

Files

6f114e9e6ff1e20e5e1f33b59a85e030_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ccc4cca2126fab5fa6ea8f053f05154a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
LCMapStringA
CloseHandle
CreateFileA
ExitProcess

user32

CreateWindowExA
SetWindowLongA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegSetValueA
RegEnumKeyA
RegEnumValueA
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegQueryValueA
RegOpenKeyA
RegDeleteKeyA

Sections

.text
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ