bb03b9f0a11a76f91c33dd67390bd9e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb03b9f0a11a76f91c33dd67390bd9e0_JaffaCakes118
Size

240KB
MD5

bb03b9f0a11a76f91c33dd67390bd9e0
SHA1

cb4964cbd4d8b68995ff34460858e60f3514eb93
SHA256

451d8f4cf270b9196729c5324f83015c117912eb5a473674b84708e0ac3ee574
SHA512

4c19bc5129f65dfb073a6fdd4368fffc4601d6813c99217599dd16d41ca6ed6138624a3fb7404b9e157ea15aa5dba2e1690d32b51b5722380ef94dac3b477318
SSDEEP

6144:QzWM7n3X+z0x4JAwnfIxR7kIY62b23Vh6PhjfEm2jscweGUe3xbaP8L:0rn3OC4maIEL63VhmfEm24BeGUeFiG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb03b9f0a11a76f91c33dd67390bd9e0_JaffaCakes118

Files

bb03b9f0a11a76f91c33dd67390bd9e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8d769b39cbfc844321ba9c5e9483fbd9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
Heap32First
VirtualProtect
WriteFile
VirtualFree
Sleep
VirtualAlloc
CreateFileA

user32

SendMessageA
GetMessagePos
GetInputState

wininet

InternetCloseHandle

ole32

CoUninitialize

advapi32

RegQueryValueA
RegQueryValueExA
RegEnumValueA

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE