08445b8d699b5da5c6bac58c054effcb_JaffaCakes118 | Triage

Sharing

General

Target

08445b8d699b5da5c6bac58c054effcb_JaffaCakes118
Size

260KB
MD5

08445b8d699b5da5c6bac58c054effcb
SHA1

acf7d7a9ad753809310a969dc52c09391d92038a
SHA256

e9c11fed92f4e800f4d084a1d9d8283383d485f07c58dc60888dadc152c60af4
SHA512

9a2cbf92ef2dcbafe83cc9cdeb307f01e6e5726f85c92bbedc50f9cdc1e4dea412d4606bb0717e809e2df11fb0c683fa1b366e83fa7afe77c486c27599a1dcbb
SSDEEP

6144:8hyZ/gWPXo/mcX7iISJf+kJqP1KmpQ+GftEptEz:sFEHMyJWe41K7+KB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08445b8d699b5da5c6bac58c054effcb_JaffaCakes118

Files

08445b8d699b5da5c6bac58c054effcb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

21f6116e828b2cd622bcc32a038ffb45

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CreateFileA
CloseHandle
ExitProcess
LCMapStringA
LoadLibraryA

user32

wsprintfA
CreateWindowExA
CloseWindow
CharLowerBuffA
SetWindowLongA

advapi32

RegCreateKeyA
RegQueryValueA
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegSetValueA
RegEnumValueA
RegOpenKeyA
RegEnumKeyA

Sections

.text
Size: 220KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 236KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ