ac52d40236ee9010f0d8bca27ef1c6b8_JaffaCakes118 | Triage

Sharing

General

Target

ac52d40236ee9010f0d8bca27ef1c6b8_JaffaCakes118
Size

164KB
MD5

ac52d40236ee9010f0d8bca27ef1c6b8
SHA1

59e4ab0d5ac96d05708c47937d51b0db29eda313
SHA256

a94a570bf94b2c4f6a3eb59f3f1db45c18044efe1cb708a804dc7770c4e7d44a
SHA512

38d2e0f0620a4571f61bae08200e0d0b2d80cd692efc003b1656f3ce32c67e7b13f45c77ecc04d14746a2b700a0b732525aadbafb311606abbf2eaf987cf37b1
SSDEEP

3072:oOnUwtjyPss+O12P7AR/ud8JnFbkj2jwuFWHHaY2Hthr4O:15hO12P7ARmetFbRgnQr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac52d40236ee9010f0d8bca27ef1c6b8_JaffaCakes118

Files

ac52d40236ee9010f0d8bca27ef1c6b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f837302b4df6df2464e02f8113ae8ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
GetCurrentProcess
LCMapStringA
CloseHandle
LoadLibraryA

user32

SetWindowLongA
CloseWindow
wsprintfA
CharLowerBuffA
CreateWindowExA

advapi32

RegQueryValueA
RegEnumValueA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegSetValueA

Sections

.text
Size: 142KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ