b10f7d8bb06e157da9845c9fd06322a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b10f7d8bb06e157da9845c9fd06322a8_JaffaCakes118
Size

424KB
MD5

b10f7d8bb06e157da9845c9fd06322a8
SHA1

044def5c355182ea25d2d1f9c7ef2333ba2df157
SHA256

ebdc932b2dd48489be44bf0c2063585cb157bd6c0414a7b353a90dceaf3b15e7
SHA512

c91abf05fdfea582f5872f79c02aeec6e4a25b5ed7482cdfd80e71b1be102fdbc5222f84de876a4a85c5114da48415ea019e7011735b708ce77e076c99822af0
SSDEEP

12288:5FzpgBkLK9ubq+u9jqT66JcYMVjQSjeZmJLEc:XzpBbq+u5zRYMVMWeZmic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b10f7d8bb06e157da9845c9fd06322a8_JaffaCakes118

Files

b10f7d8bb06e157da9845c9fd06322a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8616a9bdd80779c3d179ff1b2bf7354e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
LoadLibraryA
GetCurrentProcess
CloseHandle
ExitProcess

user32

CloseWindow
SetWindowLongA
CreateWindowExA
CharLowerBuffA
wsprintfA

advapi32

RegDeleteValueA
RegCloseKey
RegEnumValueA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegOpenKeyA

Sections

.text
Size: 401KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 248KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ