bbfa8dc289c623ef36b046251d198f73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbfa8dc289c623ef36b046251d198f73_JaffaCakes118
Size

178KB
MD5

bbfa8dc289c623ef36b046251d198f73
SHA1

9bef8cf4ac2e8540a3d62ca585ec1c1e0b3883d9
SHA256

a6cc4e7cb90a29794207241b5123f4b4ced9628f6f2c4f0f98478b01f935006e
SHA512

e349801a5a399a58e58b3a70173940dec62e15f3af6ae6e428eda95e2fb2ff5d0f50d047b606e6e19ec6334b78c6d17288f058b2fc8f2f3f638c73ea9408c5f2
SSDEEP

3072:l4Ui5NGmQKx8Z0ymR5lYc8zkvum9T0EKEuCmUGlqHk32zR2rvxpgy+JCVnd:l43YpKS6n5l8kVdKEuC6lqH9zR2jwy+s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bbfa8dc289c623ef36b046251d198f73_JaffaCakes118

Files

bbfa8dc289c623ef36b046251d198f73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

126c2fe02f2b010c1ddccd6b8f0391f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
ExitProcess
CreateFileA
GetCurrentProcess
CloseHandle

user32

CloseWindow
CharLowerBuffA
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
RegCloseKey
RegSetValueA

Sections

.text
Size: 139KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ