95c5f8c36d2ea04ffb4ee226479d05b4_JaffaCakes118 | Triage

Sharing

General

Target

95c5f8c36d2ea04ffb4ee226479d05b4_JaffaCakes118
Size

321KB
MD5

95c5f8c36d2ea04ffb4ee226479d05b4
SHA1

4cd260b72e277eb56d65503095505d75106e5f1e
SHA256

e2db72ac87f4b512621baae125f15c7f7ce594eace9dbf28d19bde9d0ca398d2
SHA512

9c111409106212af6b891e4ae26d566978c7886ec0d7355a05fcf834d0f73ec920a13c18c06bba38617ab2f4f692ff6c462f0cc97ae8d72086bc1f42d7cf0947
SSDEEP

6144:2coFSDww8hAbd6/3bQetP3ydQHs+jFx2RaSPRqmC/K:KFNWC3bQe5FMKFx2ISplmK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95c5f8c36d2ea04ffb4ee226479d05b4_JaffaCakes118

Files

95c5f8c36d2ea04ffb4ee226479d05b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aaf092e4c2112fc47bb301d249b96a21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
LoadLibraryA
CloseHandle
CreateFileA
ExitProcess

user32

CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA

advapi32

RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyA
RegSetValueA
RegOpenKeyA

Sections

.text
Size: 215KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ