aadbac8207e04a07ca7b0eb8fe1108ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aadbac8207e04a07ca7b0eb8fe1108ea_JaffaCakes118
Size

208KB
MD5

aadbac8207e04a07ca7b0eb8fe1108ea
SHA1

8156a63b974f56e99187fd951dd3c379643161d4
SHA256

0aa03f7aeecbfe93098aaec89c57a497ee8130261764dcf8b2aee41b50a42219
SHA512

8d2280e3ce8fe8bfbaa0a6ecabec8f7d45644fc890a02fa7c5e63074b2736f24f708aba7eb0370d3138e5cc4bae08b290b3e0cd89be483527891242731a3ec30
SSDEEP

6144:FxTxdfazK2verXrCQQ5lLg1ZL7cs9taFy+vC:zxN6viXrC15hg1ZHcWaUt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aadbac8207e04a07ca7b0eb8fe1108ea_JaffaCakes118

Files

aadbac8207e04a07ca7b0eb8fe1108ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eff2ce21e3593b9bc6187b7183f4a975

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
LoadLibraryA
ExitProcess
CreateFileA
CloseHandle

user32

CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA

advapi32

RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegSetValueA
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ