ac212440eb34eff135c38549feb36ce9_JaffaCakes118 | Triage

Sharing

General

Target

ac212440eb34eff135c38549feb36ce9_JaffaCakes118
Size

680KB
MD5

ac212440eb34eff135c38549feb36ce9
SHA1

7abcfc81e744a4bbcdc7a8a80156cd50c8f2f34e
SHA256

30ef71ac223f4ecf8820c774e1951604b2637fe1fcb83aa161231408d2cc4bb5
SHA512

7e974c77a8d96b975c827a1679fd96f82fc8f23b857b38e37982b634dd733776b2a91b5feb7ebdf2bf067aef80e2386fb5183cdb7cec071ee388d229397a233a
SSDEEP

12288:bWOmu28vF+GAY8VNuDzxUziRhXy8s7StujZJr+sDGXhDf8MbrdHfDF:u8tATUaWY7jE8M9rF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac212440eb34eff135c38549feb36ce9_JaffaCakes118

Files

ac212440eb34eff135c38549feb36ce9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

06524c217f3092eb30f19c4f95b57cdb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
CreateFileA
LCMapStringA
LoadLibraryA
ExitProcess

user32

CharLowerBuffA
CreateWindowExA
SetWindowLongA
CloseWindow
wsprintfA

advapi32

RegCloseKey
RegQueryValueA
RegEnumValueA
RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA

Sections

.text
Size: 320KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ