dda37304e23b6c4c88ac28df8e880c7b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dda37304e23b6c4c88ac28df8e880c7b_JaffaCakes118
Size

455KB
MD5

dda37304e23b6c4c88ac28df8e880c7b
SHA1

79315e72aa7a4d407d52c08e9d61d4e1ddea92e4
SHA256

9a5a873f0cb04d45e45ccf89b885603726457e4ffe3700efd458cc586cad1f1a
SHA512

02270e68d79944f0f9eb276f3e1daa317e8cd0d1efe3a12b6cb583983f5e8fe9390eb140d818d93f77a7d59751ceb172fa915c82469c821a41d1fe558ba92027
SSDEEP

12288:SYqrYGD+30Dh8LlgrgARrL1qOBZddj8m0ATk6dMPwezBeS7U:lqS8OLw/rVBZ/EATk6gBz1U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dda37304e23b6c4c88ac28df8e880c7b_JaffaCakes118

Files

dda37304e23b6c4c88ac28df8e880c7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

17f33d438ae594c2c0c83a2482a0c3fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
ExitProcess
LCMapStringA
GetCurrentProcess
CreateFileA

user32

CreateWindowExA
CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA

advapi32

RegSetValueA
RegEnumValueA
RegCreateKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 131KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ