b5c004c5d5ada67a5e8c0d89c6414e86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5c004c5d5ada67a5e8c0d89c6414e86_JaffaCakes118
Size

221KB
MD5

b5c004c5d5ada67a5e8c0d89c6414e86
SHA1

9fe7422da78ae0183473141110be6b5df40d40f7
SHA256

76245a9f743da571318952550d2fac1569cd60c7d2620b5dc9ba9db031b5419f
SHA512

d9ab9fd10c5317e9f00cbffcbcc10e937aad0593945285e633897368094eaf4f478687fa7b49da34c9c04c32fdcbad6950bdc553a9e32fbfe6d46e9e797c24a3
SSDEEP

3072:n8TQCYexSztpelV5V0YhMl2K9MaWj8j9Mb1eUPRGfANE2L9zWai6MAl9938D2Wkh:nefua259U7JJRL997l99MY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5c004c5d5ada67a5e8c0d89c6414e86_JaffaCakes118

Files

b5c004c5d5ada67a5e8c0d89c6414e86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d099b3279b4d518f665b2f39d486241e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
LoadLibraryA
CloseHandle
GetCurrentProcess
LCMapStringA

user32

CloseWindow
wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA

advapi32

RegDeleteKeyA
RegSetValueA
RegOpenKeyA
RegQueryValueA
RegEnumValueA
RegCloseKey
RegDeleteValueA
RegCreateKeyA
RegEnumKeyA

Sections

.text
Size: 167KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ