d13d238bc0bcefabd11f0c3338cedf54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d13d238bc0bcefabd11f0c3338cedf54_JaffaCakes118
Size

204KB
MD5

d13d238bc0bcefabd11f0c3338cedf54
SHA1

065d6a6279b5ac62e6c65f70870e69c01c0d1b0e
SHA256

7c94e5a58338302821ba895515579f4411d4c3d7649a1bd5319a5b1dce884f8e
SHA512

88b52af3f2f67491bda16de6dfec2b21887ca76a4393e80fcced71b04cbee25a5915fe5e0c97919fbb9c7d49e0c6aaad12fb2a49f9ec6dd59510bda0fd1b3bc3
SSDEEP

6144:wAWLBtH/F/5POTsi+A6qEg5/P8rJfyYGr2/0epM:KLPh5o+P58cl6YLpM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d13d238bc0bcefabd11f0c3338cedf54_JaffaCakes118

Files

d13d238bc0bcefabd11f0c3338cedf54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e773e4ef8d4533ef763f1d29afc5cb4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
CloseHandle
GetCurrentProcess
LoadLibraryA
LCMapStringA
ExitProcess

user32

wsprintfA
CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA

advapi32

RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegCreateKeyA
RegSetValueA
RegQueryValueA
RegDeleteKeyA
RegEnumValueA
RegEnumKeyA

Sections

.text
Size: 184KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ