ac1cb9240fa2a9f58919051680f5ba08_JaffaCakes118 | Triage

Sharing

General

Target

ac1cb9240fa2a9f58919051680f5ba08_JaffaCakes118
Size

257KB
MD5

ac1cb9240fa2a9f58919051680f5ba08
SHA1

0d36254fbd13c78d7ecdf6a02cd32dd3820e212b
SHA256

e69b777d661e994b997c86089f751b69b32d327fe14c50c7f3eafcec32d9a105
SHA512

4a32645061f37a83657eb65813ccab27b1e1b45063b8e4df4f7a72bd422662385c248810f10a62f15c4273ed7278b7086ba5f65ca1d74009388edbf10441f613
SSDEEP

3072:3WuPF23Xu7YOdSEJHxvSZIkBr4uPcze6e/ko4acPRF4ztz0F8Nu0gfMZcd:mu8FOdBHm6i/X4aGj4ztzk8Wfmq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac1cb9240fa2a9f58919051680f5ba08_JaffaCakes118

Files

ac1cb9240fa2a9f58919051680f5ba08_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ce9ffaf192e2f9480cc1868249fd3b79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA

user32

SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegSetValueA
RegOpenKeyA
RegCreateKeyA
RegEnumValueA
RegEnumKeyA
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey

Sections

.text
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ