c08ddab9b1af724ad5b56599b4f41890_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c08ddab9b1af724ad5b56599b4f41890_JaffaCakes118
Size

948KB
MD5

c08ddab9b1af724ad5b56599b4f41890
SHA1

79c3751ca2d43d0835104e50365eedfcb22ebce9
SHA256

cbbb0bea1e969d58c8ea4caffba2848d366476cb2b4058f0f266a62ba002af1a
SHA512

af3b2fa0e501a033afd65f0a810be76d408a18aad6f34e297d3d4f3fee64a2388f85e4806a8142484e3eccb4813a8dc22f80ea79ca2cebc32977966da48b1d8a
SSDEEP

24576:usU5YjV2lT/2XQhiE6y0mfBmi9I9JT4wpZTUrvdT:usUu2la0jBmiyZyvdT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c08ddab9b1af724ad5b56599b4f41890_JaffaCakes118

Files

c08ddab9b1af724ad5b56599b4f41890_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a8307b69b3286468d3aedd4b395f24f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
GetCurrentProcess
ExitProcess
LoadLibraryA
CreateFileA

user32

wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow
SetWindowLongA

advapi32

RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegCloseKey
RegSetValueA
RegEnumValueA
RegDeleteValueA
RegCreateKeyA

Sections

.text
Size: 931KB - Virtual size: 932KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ