a3acde15f28b1ef60cbba18f4ebbb16f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3acde15f28b1ef60cbba18f4ebbb16f_JaffaCakes118
Size

280KB
MD5

a3acde15f28b1ef60cbba18f4ebbb16f
SHA1

29a3628426e17b45c51917f79dae4a25b5ee6882
SHA256

fdb48a7426855a5fdd1c038b1808749e8b0248ebb46c7e0208305e4a0db470e8
SHA512

97a38848ae68b54f1c661827539b39e7189df51e6e97a7a1da5b21bc43bf77909c3f14b05aa125bcfce7f679cd5f29699850212bd449d7ccd1eddb52493ec1f0
SSDEEP

6144:SCjmJD7mdkY0FsLJ56RSAGDt7EFDd0hyNKs7NZzEe:SbuqFXR1GDSFD77JJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3acde15f28b1ef60cbba18f4ebbb16f_JaffaCakes118

Files

a3acde15f28b1ef60cbba18f4ebbb16f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5855e45f0678e2f8274bf26e51332ece

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
GetCurrentProcess
LoadLibraryA
CreateFileA
ExitProcess

user32

CharLowerBuffA
CreateWindowExA
SetWindowLongA
CloseWindow
wsprintfA

advapi32

RegCloseKey
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueA
RegOpenKeyA
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 258KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ