552c2886f1cb7e4670eed1643555d7d8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

552c2886f1cb7e4670eed1643555d7d8_JaffaCakes118
Size

728KB
MD5

552c2886f1cb7e4670eed1643555d7d8
SHA1

da009e32fe2b5fb9682f7ea69a869c54ab3936d9
SHA256

b6479608132c3ea4fe546e2cc37f3b34da0150266ddda0fa1671ad8a5c141419
SHA512

f9fa52d2fa5d0471ff017dd8979c0db8f958f574b48343f1de0def2396176c11252733d3d3913b5a14f523a7e8990f39f9d695f8061c12944ce96563e9589155
SSDEEP

12288:9+w63Oa8FtKAdmBhQADD17tRG8+qi64P8d7os9RbQaPdfGOgz6B:v630F8eoKIlTG8+qi648mskaUm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
552c2886f1cb7e4670eed1643555d7d8_JaffaCakes118

Files

552c2886f1cb7e4670eed1643555d7d8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e6f6f1ca4055edc5f9b729787b17a8f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
LCMapStringA
LoadLibraryA
CreateFileA
ExitProcess

user32

SetWindowLongA
CharLowerBuffA
CreateWindowExA
CloseWindow
wsprintfA

advapi32

RegCloseKey
RegCreateKeyA
RegEnumValueA
RegEnumKeyA
RegQueryValueA
RegDeleteValueA
RegOpenKeyA
RegSetValueA
RegDeleteKeyA

Sections

.text
Size: 688KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ