bae003aee3b8a7375430014db601648f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bae003aee3b8a7375430014db601648f_JaffaCakes118
Size

172KB
MD5

bae003aee3b8a7375430014db601648f
SHA1

c082cd4a18000dbf3d8a50684aa2077430abfc94
SHA256

f87fed708ab589765f4e07a6c58c4921821a706d0c39e9dc5d5e4c80e9a87fed
SHA512

a740ab868fc752d6b8579514798536c6574fda0582b7c9da24a8ec60889d32d083a0ecbf57f0de918962c1d73d1955fe35e94d0fa7721eff32a5941de554fdec
SSDEEP

3072:UFU+GezzaNJPI1ZcI5SmydkAXaXQZUZNYg0fl5G5hrfrif1Jg:UtzzQqZcIcLafvqm5lja1C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bae003aee3b8a7375430014db601648f_JaffaCakes118

Files

bae003aee3b8a7375430014db601648f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

78cef702b5a40788ca0f21a6b7e2b02d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
ExitProcess
CloseHandle
GetCurrentProcess
CreateFileA

user32

SetWindowLongA
CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA

advapi32

RegDeleteValueA
RegCreateKeyA
RegEnumKeyA
RegSetValueA
RegOpenKeyA
RegEnumValueA
RegCloseKey
RegDeleteKeyA
RegQueryValueA

Sections

.text
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ