88833e42d3b7cf1e25e101b0e0d71cc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88833e42d3b7cf1e25e101b0e0d71cc5_JaffaCakes118
Size

597KB
MD5

88833e42d3b7cf1e25e101b0e0d71cc5
SHA1

a5b4a90110cff21d48180634bb76321dea879f83
SHA256

c5c83974f4d27c863c634d2372a3f466af1ec79b2d6ede8e79a3b6e71a914acb
SHA512

cc4d78402245f7ce92d42faa044f9b4e00232c21b020ee63b738d929aff1c23e3f974504df0e347cce150b31cbd03d414c2a7a16e0de2c45dbc35bae12552783
SSDEEP

12288:9GHXKpT/Td8Wi5FuslRJby6T7rGNrkty0fkhAlmv6YFM6:YaB/Td8z5byqErmyFAe6YFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88833e42d3b7cf1e25e101b0e0d71cc5_JaffaCakes118

Files

88833e42d3b7cf1e25e101b0e0d71cc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ccf408792062ac30dd517d2790da07a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
LCMapStringA
ExitProcess
LoadLibraryA
CloseHandle

user32

CreateWindowExA
SetWindowLongA
CharLowerBuffA
CloseWindow
wsprintfA

advapi32

RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegEnumValueA
RegEnumKeyA
RegSetValueA
RegQueryValueA

Sections

.text
Size: 264KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ