bdeffda0ca38baf24e47244dc9bcc410_JaffaCakes118 | Triage

Sharing

General

Target

bdeffda0ca38baf24e47244dc9bcc410_JaffaCakes118
Size

964KB
MD5

bdeffda0ca38baf24e47244dc9bcc410
SHA1

2eedc875ed99f6bd519b2abb78057233b9eb8e26
SHA256

8fb0d60a2fe713e9e8bdb4d636c832bddeb9460b7d775cb1cdfc5d0218ec6123
SHA512

a49c41fe7b63f932c6769bedc38a27ed7a5e2724ba2d60dd3cd0bfe073a9836a9695449086315f70ee603f6ae5b2545e4e1e363e00859dd3a292b79f93f4ab9e
SSDEEP

24576:lJAKFORHLpU4w2pabclQqX5cNbTf2e4f0QW5ijQJf:HXSla2paolQqpKbaJ7jQ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdeffda0ca38baf24e47244dc9bcc410_JaffaCakes118

Files

bdeffda0ca38baf24e47244dc9bcc410_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a67c9c8c737670da6a285357f10d932b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA
GetCurrentProcess
LCMapStringA

user32

wsprintfA
SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegDeleteValueA
RegSetValueA
RegCloseKey
RegDeleteKeyA
RegEnumValueA
RegCreateKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA

Sections

.text
Size: 947KB - Virtual size: 948KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ