8b00a5bb6652ee467a0fa98523d4795e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b00a5bb6652ee467a0fa98523d4795e_JaffaCakes118
Size

608KB
MD5

8b00a5bb6652ee467a0fa98523d4795e
SHA1

45d826bc6cba98cb46aa5be1be8f3287e8d61e5d
SHA256

ce9150bcbce8bc5646dc5a0b760f36201f8ca3d4b35c17d98aab11f5c74b76f5
SHA512

d777e0817620cfdec6e4273c3826312b86b9d99ca3e645a821284c8b42118fc1d36bbc46efb49b08235f77d29e36cd9719d633f0ed0ffdf3ab3b8636a6770a13
SSDEEP

12288:ssr/2PJNOPN606El0tAWSwzA48jK2y8TFXbKkR4YWaTmWbHaFk9HkP:ss7CJNQF26/wsrO2BXiYXiWbHIkOP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b00a5bb6652ee467a0fa98523d4795e_JaffaCakes118

Files

8b00a5bb6652ee467a0fa98523d4795e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

edc73359774b6fc5a232ca0a644a51f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
GetCurrentProcess
CloseHandle
LCMapStringA
ExitProcess

user32

wsprintfA
CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA

advapi32

RegOpenKeyA
RegQueryValueA
RegCloseKey
RegCreateKeyA
RegEnumValueA
RegSetValueA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA

Sections

.text
Size: 530KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ