ae9c1cec55e72fa0517af5a542518bd8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae9c1cec55e72fa0517af5a542518bd8_JaffaCakes118
Size

384KB
MD5

ae9c1cec55e72fa0517af5a542518bd8
SHA1

b73db3579c0a442e52508ec2987f42ce3b1fc54a
SHA256

5f26b6025b683d4dce1951a4002539f22ee1e6a89a48e02a68d217c705618aeb
SHA512

b0b251cdaf0ecd70311e238b47243e71c66b2a5b72ef8487eecd17c040452617186376c858cd812ccd5c674aa4c1e7979cbfd38eb16a61fde2291deecb5cb69f
SSDEEP

6144:JEr44b4pMPBVIQjFyCEu8MRemR0zoGAJ5MqKr8o6ItIrRBwSbC6sINkXdPuSAQlf:oIQR8MB4AJ5s8wOrLwOCWNkXdPubQcY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae9c1cec55e72fa0517af5a542518bd8_JaffaCakes118

Files

ae9c1cec55e72fa0517af5a542518bd8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b3b5a93f7ae9a98b4b5a6939a53aab2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle
LCMapStringA

user32

CharLowerBuffA
CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA

advapi32

RegQueryValueA
RegEnumValueA
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegSetValueA

Sections

.text
Size: 363KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ