8cfa9917c802d14e958898c074d475b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cfa9917c802d14e958898c074d475b2_JaffaCakes118
Size

233KB
MD5

8cfa9917c802d14e958898c074d475b2
SHA1

1d5acca3349359ed3e16170436b56ca4aed8d04d
SHA256

f1afc5b6a8a76487595c93c3afea9ea094eebe9f9d8805848f79ab5f436838b8
SHA512

9aaf6d4a2d2bae1bd109583dd07509943688089e9692ac33cd0b23323e9da2a4a54c65f128d9b14ea79ae7bb974d4a39af12e6c12987d24d601abade867a2302
SSDEEP

6144:cDa+8dH1bTw5D5sI8JA0PJlwys9I7uFM7Ojgya:q/8L3Id4Jw9CBEa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cfa9917c802d14e958898c074d475b2_JaffaCakes118

Files

8cfa9917c802d14e958898c074d475b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2fe4a5442daf03707f8cf9a3977a529f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
GetCurrentProcess
LoadLibraryA
LCMapStringA
ExitProcess
CreateFileA

user32

CloseWindow
wsprintfA
SetWindowLongA
CharLowerBuffA
CreateWindowExA

advapi32

RegCreateKeyA
RegEnumKeyA
RegEnumValueA
RegOpenKeyA
RegSetValueA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegQueryValueA

Sections

.text
Size: 132KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ