baefb9b23ce3df55b3ade5dd9752760a_JaffaCakes118 | Triage

Sharing

General

Target

baefb9b23ce3df55b3ade5dd9752760a_JaffaCakes118
Size

168KB
MD5

baefb9b23ce3df55b3ade5dd9752760a
SHA1

605ee7e152dd3cafd942994ab23ba853782068c4
SHA256

be77e225ea686721f2814772fe263a35fafe4a66158a933e5c00b781ac156247
SHA512

b507ade5ccbcac7e2ec967b5b22f0526d4fd0638b8cb99061f739a30fe7be5ce36e827039944fe63cce801f6db5a97a6eeedf3d7b03dca0ccaa2cca792b195cc
SSDEEP

3072:RTsImTYlPLD+sWJGrtPDB6b2DIeMFBnUK5rusQSjkT5xadFt0:xtnheecyWH5jjkT5xadFt0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baefb9b23ce3df55b3ade5dd9752760a_JaffaCakes118

Files

baefb9b23ce3df55b3ade5dd9752760a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b054c12a98a76f220040f457d23e3534

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
ExitProcess
CreateFileA
GetCurrentProcess
CloseHandle

user32

CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegQueryValueA
RegEnumValueA
RegCloseKey
RegSetValueA
RegDeleteValueA
RegEnumKeyA
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ