8dfefc361b866a2fa429c43b5df464d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dfefc361b866a2fa429c43b5df464d2_JaffaCakes118
Size

2.6MB
MD5

8dfefc361b866a2fa429c43b5df464d2
SHA1

070819fc042aded6f9a26614608a0339c54e1488
SHA256

e77c6ae66168d6fb321d1ce65c20c30c2e9f3fd61d34c7b235a04941f82f01bf
SHA512

6ae0a400931e19990d78d79929f4cefe8cd40c7b80bc8c581da106aef10bed5612516387433fbc291a2d82f6b77f9fd1e06c724045946f143071a7322cc38ced
SSDEEP

24576:GXQdeWGQa/cthSxJbuKLM+e9NAwkQ4WbAE:Ggdoh/cfFCM3PAL0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dfefc361b866a2fa429c43b5df464d2_JaffaCakes118

Files

8dfefc361b866a2fa429c43b5df464d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

011ffb94f1578998c8459806d417612e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
CreateFileA
LoadLibraryA
ExitProcess
GetCurrentProcess

user32

CreateWindowExA
wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow

advapi32

RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegOpenKeyA
RegEnumValueA
RegCreateKeyA
RegQueryValueA
RegDeleteKeyA
RegSetValueA

Sections

.text
Size: 225KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 544KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ