b7a8d7f0993ba54fbd27b3cda0ca0639_JaffaCakes118 | Triage

Sharing

General

Target

b7a8d7f0993ba54fbd27b3cda0ca0639_JaffaCakes118
Size

360KB
MD5

b7a8d7f0993ba54fbd27b3cda0ca0639
SHA1

6f4dd90f0b10f6c5054c89d162da8e5e43c5cccd
SHA256

9b1e63f3e416fe9e2f548e84569dfa1d9b94bcc469269db892db273a039deef5
SHA512

d2cc55b54f0972a08c52dca4cccdd3faa5fa7a633338ed7db349156443476a918d12bb28f58406a3d40248362c49f56ecd84fc16be5187f81ff954bd9a842672
SSDEEP

6144:M0zDe7h38pgvz2+IImUpZ9HgUJC3grmnwmv80TDcUk4FtUXF:M0zDelMpqz2+VHpDF6n1zTVtUXF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b7a8d7f0993ba54fbd27b3cda0ca0639_JaffaCakes118

Files

b7a8d7f0993ba54fbd27b3cda0ca0639_JaffaCakes118
.exe windows:6 windows x86 arch:x86

76017750c22c0bac79fc17280a24d804

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
LCMapStringA
GetCurrentProcess
CloseHandle
ExitProcess

user32

wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow

advapi32

RegDeleteValueA
RegEnumValueA
RegQueryValueA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegCloseKey
RegSetValueA
RegEnumKeyA

Sections

.text
Size: 266KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ