aaaafe55f415cb1cab145d1bbaaf15d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaaafe55f415cb1cab145d1bbaaf15d7_JaffaCakes118
Size

628KB
MD5

aaaafe55f415cb1cab145d1bbaaf15d7
SHA1

0f0d6c629e2b0cc41f99d36b7a7a6894f8fdedad
SHA256

0c5523c1842136a3f0a4bb4d03b13ee4d010c595040f011b01b657781874a1a4
SHA512

de19b63f8378fbc95e15cb8bbf7431e840dd63ca7265b6cc6c38f5b46a3f33bc9f27577a0ab8ca6e8b1ba556a2289eefff433ba3a306e19db73b5ad0cee84e8b
SSDEEP

12288:9U1/G70ce/VMHZKsVpzqs2L5p9iVH+xxXjo:9E/PcmMHEsLqsFB+xe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaaafe55f415cb1cab145d1bbaaf15d7_JaffaCakes118

Files

aaaafe55f415cb1cab145d1bbaaf15d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51a73770e0c32c22c6cf6a785da33190

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
LCMapStringA
CloseHandle
GetCurrentProcess
ExitProcess

user32

CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegDeleteKeyA
RegEnumValueA
RegCreateKeyA
RegCloseKey
RegQueryValueA
RegEnumKeyA
RegSetValueA
RegOpenKeyA
RegDeleteValueA

Sections

.text
Size: 574KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ