baa4075cc7ab86a8adc269c24049c6b5_JaffaCakes118 | Triage

Sharing

General

Target

baa4075cc7ab86a8adc269c24049c6b5_JaffaCakes118
Size

435KB
MD5

baa4075cc7ab86a8adc269c24049c6b5
SHA1

716f256342eea04dfb35a68d2997729e0deb338e
SHA256

39b5a0777f2a9d7b5966ff06c43797dec4ff4a09ddb6250fd7123340aa48d32d
SHA512

7205f51d05c99bbb8012fa359af9fde56a3c7e074273eb0a398921828725aa4d532fcb16dcba04ef231a657d6be37dd121daef5027a34c3918a32072b0948979
SSDEEP

12288:8rMNcsSx98xEk+FgjUFfEUpDcZiCrMMTBb7:8rMxESEPFgYhEoDarMM57

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baa4075cc7ab86a8adc269c24049c6b5_JaffaCakes118

Files

baa4075cc7ab86a8adc269c24049c6b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4004d23c7ae7f384206ea1042ba3f92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LCMapStringA
CreateFileA
LoadLibraryA
GetCurrentProcess
CloseHandle

user32

wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA

advapi32

RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegSetValueA
RegCreateKeyA
RegCloseKey
RegQueryValueA
RegEnumValueA
RegOpenKeyA

Sections

.text
Size: 127KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ