aad2418709103f2642b7ea3e54f87f20_JaffaCakes118 | Triage

Sharing

General

Target

aad2418709103f2642b7ea3e54f87f20_JaffaCakes118
Size

212KB
MD5

aad2418709103f2642b7ea3e54f87f20
SHA1

424ebb191b42c5b1b870f8c766012a909da498c5
SHA256

2ab024a82bb245306102598d867a3f47e174f46a7b162b3f60830714ef3b69d1
SHA512

94e73379b5e25b07502c1682b263756068aad12c7ea8dd3f5be3c2cf55cf2304f7918c6bf29d64f9fddbd015bfc72bb0b0e3b6eec83e2ec8ac14cee433fd3780
SSDEEP

3072:fUregIENshidwTLaMT4Aw97CXKGEccD6UFaUtPmcD0hR5e5n1czu1IUAXPIi66qI:sSb0QLUFRCNk6U4Utg5onWzu1INgZKeo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aad2418709103f2642b7ea3e54f87f20_JaffaCakes118

Files

aad2418709103f2642b7ea3e54f87f20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d6a1093c480e96b1a2419f6e6095506c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
CloseHandle
ExitProcess
GetCurrentProcess
CreateFileA

user32

SetWindowLongA
wsprintfA
CloseWindow
CharLowerBuffA
CreateWindowExA

advapi32

RegOpenKeyA
RegDeleteValueA
RegEnumValueA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
RegSetValueA

Sections

.text
Size: 167KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ