bc8728e37ef9b02b6eaed0b878089d8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc8728e37ef9b02b6eaed0b878089d8e_JaffaCakes118
Size

196KB
MD5

bc8728e37ef9b02b6eaed0b878089d8e
SHA1

cc51b5b6d4bc0730267c76a7944bf0c5b6fc9b70
SHA256

88c367b621d4c0c4dd411d8a8bb1b612658ba2cdeaa372142e2999e6962e0bd3
SHA512

e0db71317515619620d32078fcac6632e724afd17921e1af0da208aad50009f9dad8ad9a9d8e329b328f3cedcf8ccdc74d555e4bdd21b8bb000a6f9674cdc284
SSDEEP

6144:fnWLYZjzTnOLuGMSZ2W6V8qNNaok6HPHQK:fnRZjzTMGSZ2zNLRHPHF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bc8728e37ef9b02b6eaed0b878089d8e_JaffaCakes118

Files

bc8728e37ef9b02b6eaed0b878089d8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e122d8bdfad0319a61d70588d5c8e287

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
ExitProcess
CreateFileA
GetCurrentProcess
LoadLibraryA

user32

CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegDeleteValueA
RegOpenKeyA
RegCloseKey
RegEnumValueA
RegCreateKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegSetValueA

Sections

.text
Size: 151KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ