0a2f513c8d53f72aee15e1926a426660_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a2f513c8d53f72aee15e1926a426660_JaffaCakes118
Size

340KB
MD5

0a2f513c8d53f72aee15e1926a426660
SHA1

3ad2b07101a3ba4250b54ca995616d1455b9b7fe
SHA256

0a2fb58ae054b4786140d67bed0da86cf6b0abc59d90bae0e8b07d6cbe0a0f94
SHA512

366e8a473dab29e2dee729a495d7ebe6103994d4b45f20ee59b1dd4827409e34436a10bf2421393ea3fc9c094524ffb7a67fdc0aafdfecc77ab6546c28bd9ab5
SSDEEP

6144:Oolxbq4RfvqTPs9OwxY3PQ0UFBZgr/KnJ0CeDn8HZfOvycIFFRDyJsjO:Ool0XPce3PQFBZ9n4DmfO6lFRDOs6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a2f513c8d53f72aee15e1926a426660_JaffaCakes118

Files

0a2f513c8d53f72aee15e1926a426660_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a8403936f3ca94eebe36e068237ceea5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
LCMapStringA
CreateFileA
LoadLibraryA
ExitProcess

user32

CharLowerBuffA
SetWindowLongA
CreateWindowExA
CloseWindow
wsprintfA

advapi32

RegDeleteValueA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegEnumValueA

Sections

.text
Size: 320KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ