cc0f419b4212c779e1497cc03f205ed9_JaffaCakes118 | Triage

Sharing

General

Target

cc0f419b4212c779e1497cc03f205ed9_JaffaCakes118
Size

94KB
MD5

cc0f419b4212c779e1497cc03f205ed9
SHA1

9412095cb8a97d28c0cca70342dded68a3f53fe2
SHA256

9f20f77fa8aa934eb5feb69e8dd790ec7444fc83a0e57db203d59e5c7e33b60e
SHA512

a7f6f19ba763e38823ad8af6403f6437913fe3fd92dcf26918b93aa120d113974e58f24a866c726f71756ea35434eca9dc68b55cd444d886a638db25faabe7fe
SSDEEP

1536:Z3gE1QqpotGEN5u0qjGKNr/Y2mminsCBOWrkFYF78LoitKcBajxkAWG5E8k8jwak:xgE1QqvENWp6nsErTCoF+ajxkzGFk8ju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
cc0f419b4212c779e1497cc03f205ed9_JaffaCakes118

Files

cc0f419b4212c779e1497cc03f205ed9_JaffaCakes118
.exe windows:65535 windows x86 arch:x86

5c60a7ba8157cc6eef2dd884ea9e1952

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetConsoleCP

advapi32

RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegCreateKeyExA
RegFlushKey
RegEnumKeyExA
RegConnectRegistryA
RegQueryValueExA

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE