7788fad8f914ba3f6b31e86e8e797df8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7788fad8f914ba3f6b31e86e8e797df8_JaffaCakes118
Size

656KB
MD5

7788fad8f914ba3f6b31e86e8e797df8
SHA1

22f6b73856b10d2ced40998b18582da3c6ea6206
SHA256

14d275ac66a568704bcbfb0c8fc8b97e16c453c48b93b954a8e62dd78aa3a138
SHA512

96429ef6a25e24bd7fd5638042626231a4d7fa577d632c246c23e3d3cc3a1a7afd22d37c1a4a78753b0ee5c406b893990c7f0b506f546c0e8597f90d2ae56d4f
SSDEEP

12288:2XD6fXQ+dd+wBvvtdG/okcnXNqvg/+ygwep:3XQ/qvvtU/okUYg7gf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7788fad8f914ba3f6b31e86e8e797df8_JaffaCakes118

Files

7788fad8f914ba3f6b31e86e8e797df8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11dbcf6fa60a4e03119c3c6214865fbc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
ExitProcess
CloseHandle
GetCurrentProcess
LCMapStringA

user32

CreateWindowExA
CharLowerBuffA
SetWindowLongA
wsprintfA
CloseWindow

advapi32

RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueA
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegSetValueA

Sections

.text
Size: 634KB - Virtual size: 636KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ