10a630e0f3ef77929fd4f29f074a6c86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10a630e0f3ef77929fd4f29f074a6c86_JaffaCakes118
Size

941KB
MD5

10a630e0f3ef77929fd4f29f074a6c86
SHA1

e8bd018397350dab0a8dfee04c0a21d839666667
SHA256

63bf34523263ead378e7dd37d7cf980967c16c5eb2b37e6ce4d39a0d045974c1
SHA512

51752f8e73c39a99b14cfc67c6195c823480b42cd8054a3d9a51ac29d0da33a983d53601fa93262106558b45f22b2e9fdada19bb61b982aa30d9257ecdfe3655
SSDEEP

24576:eFv+GrqJcNt28iBEXp3+qLHh07HoYQ6KZo7DqYQ:4vLFtdRXNHe7HA6KZo7OZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10a630e0f3ef77929fd4f29f074a6c86_JaffaCakes118

Files

10a630e0f3ef77929fd4f29f074a6c86_JaffaCakes118
.exe windows:5 windows x86 arch:x86

82daa26ff4d05b7c77ba415bfedd5773

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LCMapStringA
CreateFileA
LoadLibraryA
GetCurrentProcess
CloseHandle

user32

CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA
CloseWindow

advapi32

RegEnumValueA
RegDeleteValueA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA

Sections

.text
Size: 495KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ