a5038c04388a33e911d6df539b75f240_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5038c04388a33e911d6df539b75f240_JaffaCakes118
Size

282KB
MD5

a5038c04388a33e911d6df539b75f240
SHA1

8afd6ca4015a941f09b640afbcbc62efcadfe308
SHA256

a2f8526279a22471f6543507aa01f5d19730fd5ad509f06c1f6bebcb9cec23ca
SHA512

cc714414b5299d2e83e400a6b5331b0f57467e196e9f06b843edc76768614907cea0758924905fa5ee8cbcbf3a69a39c27151fd7d1d19ab81b2dca348a7b0131
SSDEEP

6144:vzWM7nadBAL7wOtCxYvC/s5GoxYjsTqyu1/Uv1ADHDED8:rrn8BAL2r/s55xaeqy5v1ADYD8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5038c04388a33e911d6df539b75f240_JaffaCakes118

Files

a5038c04388a33e911d6df539b75f240_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d769b39cbfc844321ba9c5e9483fbd9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
Heap32First
VirtualProtect
WriteFile
VirtualFree
Sleep
VirtualAlloc
CreateFileA

user32

SendMessageA
GetMessagePos
GetInputState

wininet

InternetCloseHandle

ole32

CoUninitialize

advapi32

RegQueryValueA
RegQueryValueExA
RegEnumValueA

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE