aacbb8646b347b0000763186dd46e5f4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aacbb8646b347b0000763186dd46e5f4_JaffaCakes118
Size

204KB
MD5

aacbb8646b347b0000763186dd46e5f4
SHA1

ed05152db8c8189b63147af0577123ded82290a6
SHA256

0867c59d72029fe7f05cd3119a0baca2a1f80038ff385f8bad4f4b9347c9f196
SHA512

eab56260dca40b531ca315d2da89eebf565dfebddba0aef1796439d0b351d9f0293f83c51c12079a5f15ab8db9b2a5282261efeb8e5d139f9761ae2a082b2c16
SSDEEP

3072:i5s6Qrif0LoE6w8gtHKRALFWLIGC50KGzpeSew094rPCmJSpN7g3o+BC3K5eqva:iDQhVjuKWEGzp9ewC4OHNvK7i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aacbb8646b347b0000763186dd46e5f4_JaffaCakes118

Files

aacbb8646b347b0000763186dd46e5f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

232d6a06519bed8c0021bf2bc1069ffc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
ExitProcess
GetCurrentProcess
CloseHandle
CreateFileA

user32

SetWindowLongA
CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueA
RegEnumKeyA
RegCloseKey
RegSetValueA

Sections

.text
Size: 161KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ