8ca6848ebef0d4df7384e02c02401b71_JaffaCakes118 | Triage

Sharing

General

Target

8ca6848ebef0d4df7384e02c02401b71_JaffaCakes118
Size

208KB
MD5

8ca6848ebef0d4df7384e02c02401b71
SHA1

38d8fa4570af5f6835a2e007a1678fabc13b48de
SHA256

8574812c4d9346643c803a3f4c15bf1ef0b55fca15dba7458d7e8048c9d15473
SHA512

7d5061634baf0d0913d0b49cb121cfa0a0b71cca2b0c2aa6648a75bf28c30759f7f4706fa327c3d81f850f5b031ae9f1fe4193a856ef4925a5f6c359105b4e37
SSDEEP

6144:CxTxdfazK2verXrCQQ5lLg10Lxcs9taFy+vP:6xN6viXrC15hg109cWaUc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ca6848ebef0d4df7384e02c02401b71_JaffaCakes118

Files

8ca6848ebef0d4df7384e02c02401b71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eff2ce21e3593b9bc6187b7183f4a975

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
LoadLibraryA
ExitProcess
CreateFileA
CloseHandle

user32

CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA

advapi32

RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegSetValueA
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ