00a093af3ba097983f5080e4303c0d79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00a093af3ba097983f5080e4303c0d79_JaffaCakes118
Size

184KB
MD5

00a093af3ba097983f5080e4303c0d79
SHA1

702ee5f617d798a4cb08b68ff760245ff5ccce54
SHA256

623c4a25cae812d9afbcff4d3f0c29f95c76c626e89f301f8fea2f0045541e85
SHA512

69bee1ce4d8f9f89af8c940b5c8eedf3bc9e55d8db27b7b8366e6b6fee4b2f15cede7454a757ebe1c0077d623c008f688c25164c9557aed9e92643f6ab5a0a43
SSDEEP

3072:81lDiphA2ZiG127uAT35doGShHGyEKAwOuiPAwgNR158oCmbLfn3tnaS5iZHUocV:8fDip/ZDQ7L5dolVGyEKOui0OmbBaaCM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00a093af3ba097983f5080e4303c0d79_JaffaCakes118

Files

00a093af3ba097983f5080e4303c0d79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4833e5011e53a98137784fff3efa9619

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
ExitProcess
CloseHandle
CreateFileA
LCMapStringA

user32

CreateWindowExA
CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow

advapi32

RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegEnumValueA
RegEnumKeyA
RegQueryValueA
RegDeleteValueA
RegCloseKey
RegSetValueA

Sections

.text
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ