c12e60a0baa5656e5bd4a698d30d2ab4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c12e60a0baa5656e5bd4a698d30d2ab4_JaffaCakes118
Size

295KB
MD5

c12e60a0baa5656e5bd4a698d30d2ab4
SHA1

e78c8f7b9a8a1c92242310028f9b4115a1b181f8
SHA256

0bbbb79a06a0e9b152439fd59a1f7e8f8d978608663abccc09c4ff096b0fe13d
SHA512

34a9cce547cd5e0b40f6d3fb5c0d78363f419119872004b6c4574c968ee6df684c5037f08518f9c1c2edefd3840167a075fc3ac07aa539edda7e0089d31ca3ca
SSDEEP

6144:U4aI3XftcLnUin/fXFV1VJhc1YcQEKEoiUPnlYk4Jrwhf:UXSCgin/v3Hncr+iKyJrwf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c12e60a0baa5656e5bd4a698d30d2ab4_JaffaCakes118

Files

c12e60a0baa5656e5bd4a698d30d2ab4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

408ffcac56734ef4bc9acaba01e13fec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
LCMapStringA
LoadLibraryA
CreateFileA
ExitProcess

user32

CharLowerBuffA
SetWindowLongA
CloseWindow
CreateWindowExA
wsprintfA

advapi32

RegDeleteKeyA
RegEnumValueA
RegQueryValueA
RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegCloseKey
RegSetValueA
RegEnumKeyA

Sections

.text
Size: 262KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ