6f6521055b4852ce5873aa54340aae4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f6521055b4852ce5873aa54340aae4e_JaffaCakes118
Size

430KB
MD5

6f6521055b4852ce5873aa54340aae4e
SHA1

54fd5d2a13d618658a07fa6efee8f566693d2344
SHA256

c25b49dcb5f0912dd57b305706e919c26f4fddaea22f6f868f505792cb38092c
SHA512

5f475f036b1cc8f5ee1ca470eb25ba576eee0fceb31723dc89f5af1cc6ad311e626f2a6e8bb5089d71a0fdc5b2909bc1a534bfaee4ca79e138c74de0d0490a73
SSDEEP

12288:mJvO/fOggly5Rt/i90eH9Nx/T/lyh4sASPy:92g7t/CzNx/T/shjASPy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f6521055b4852ce5873aa54340aae4e_JaffaCakes118

Files

6f6521055b4852ce5873aa54340aae4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b0676739fa39318ad6ff90b4785cd10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
CloseHandle
LCMapStringA
ExitProcess
LoadLibraryA
GetCurrentProcess

user32

CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA

advapi32

RegCreateKeyA
RegCloseKey
RegSetValueA
RegEnumKeyA
RegEnumValueA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegOpenKeyA

Sections

.text
Size: 120KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ