83ecdda23bc980b0bef285f5ba4f063d_JaffaCakes118 | Triage

Sharing

General

Target

83ecdda23bc980b0bef285f5ba4f063d_JaffaCakes118
Size

240KB
MD5

83ecdda23bc980b0bef285f5ba4f063d
SHA1

af9b10eac16fedfb2051f054d83b176e7362e5b4
SHA256

5027d80a878b29161f2dfbb14bc617b1aed34918ecea8ae63e8dbea78643ae40
SHA512

78363aef2b7e09623ae47535293512741d75e8f91d5fbb84d1ddf836d048fe664ae09a4826d24f0cfda49d08c23bc1ab4d8415667750d674df6090d65f7054a1
SSDEEP

6144:fzWM7n5sjYTNCOeajVq4IxFxG8IiA4nmLoV3oQO:brnF4t4IHxG8Ix4GoV2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83ecdda23bc980b0bef285f5ba4f063d_JaffaCakes118

Files

83ecdda23bc980b0bef285f5ba4f063d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d769b39cbfc844321ba9c5e9483fbd9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
Heap32First
VirtualProtect
WriteFile
VirtualFree
Sleep
VirtualAlloc
CreateFileA

user32

SendMessageA
GetMessagePos
GetInputState

wininet

InternetCloseHandle

ole32

CoUninitialize

advapi32

RegQueryValueA
RegQueryValueExA
RegEnumValueA

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE