ba433b48963e5867305d0a0885e2f1a9_JaffaCakes118 | Triage

Sharing

General

Target

ba433b48963e5867305d0a0885e2f1a9_JaffaCakes118
Size

256KB
MD5

ba433b48963e5867305d0a0885e2f1a9
SHA1

95b3e061b6b1943f5f6d62738ebf05a04add7128
SHA256

7c86f9c3b1f8247e961d9186105c1c1f52e12423b5e3f0fdbee0ef2142ff534f
SHA512

b40e16c6e960e01ea41c9f08c182858d54ef5f96f752b24b2669f7a1397a4b434a18ee9c483d2f5b3b7f3805108f62399b0566c5b70e58c9b5009ac90b65332d
SSDEEP

6144:uQjLyQVSpPD9gtefEsp4yxQA8p9NbZDBV+9eIeuRbZ7n7rma:uQQD9gt4PRxoNPs9eIn73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba433b48963e5867305d0a0885e2f1a9_JaffaCakes118

Files

ba433b48963e5867305d0a0885e2f1a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f001a6f9047e57849bd7a3b090cafb1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
CloseHandle
CreateFileA
LoadLibraryA
GetCurrentProcess

user32

CloseWindow
CreateWindowExA
CharLowerBuffA
SetWindowLongA
wsprintfA

advapi32

RegQueryValueA
RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegEnumValueA
RegSetValueA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA

Sections

.text
Size: 234KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ