8eff9f0d21147cc2e618cc2ff818555e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8eff9f0d21147cc2e618cc2ff818555e_JaffaCakes118
Size

728KB
MD5

8eff9f0d21147cc2e618cc2ff818555e
SHA1

4ef60933c3d112a526bbc2eb5fb59a4937226e1d
SHA256

119d5369531d6c8d78f9d15c911e99e09fef570539c8a49ee8d337885500ce20
SHA512

a30e70b400ed1be8809b26bb4447861279877ef36e1c34f3a403685d575776757b6924921329b6f551cfd274b48b65265401b11e9bdf88613800304fc6c3a785
SSDEEP

12288:or36KMwnZkZkE7w2QGHG7P4ldQjM/vI36X5p0HK1JgHML6J5pBggdJHpip:or0GZiv7w2QelOXKEHKbgs2JzBJdJHp0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eff9f0d21147cc2e618cc2ff818555e_JaffaCakes118

Files

8eff9f0d21147cc2e618cc2ff818555e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

daa08a4a4d28caf75791fa8df2d8f7dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
LoadLibraryA
CreateFileA
CloseHandle
ExitProcess

user32

SetWindowLongA
CharLowerBuffA
wsprintfA
CreateWindowExA
CloseWindow

advapi32

RegCreateKeyA
RegEnumValueA
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegDeleteKeyA

Sections

.text
Size: 609KB - Virtual size: 612KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ