a17860f4995ff2c69420d397d8683f0b_JaffaCakes118 | Triage

Sharing

General

Target

a17860f4995ff2c69420d397d8683f0b_JaffaCakes118
Size

628KB
MD5

a17860f4995ff2c69420d397d8683f0b
SHA1

bba821623df6d4bae9b5401b539e197b7aeecbb6
SHA256

ec4c1d8b7d07b17db8c31b16c0c0af488aae266afaf727c40bdb84eeb69ec44e
SHA512

7b4e0f6f48d46edec41846f703dbad46667ba5ac71b91a786a0d8a0b918c4c714816bc5c108f03994b2dae1a4f757fe225cd65f0a3ccf3e08a16fdfa30b662f9
SSDEEP

12288:Bl62RLeQqWg5CS9Xg9MCOgBC1rD/fJ6E3SCEnZO8XBOMSHcEX0lg:e2RLejJ5J9w9ML1rTfM33hoMNED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a17860f4995ff2c69420d397d8683f0b_JaffaCakes118

Files

a17860f4995ff2c69420d397d8683f0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c240dc2bae21fc8003a139a830170687

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
CloseHandle
ExitProcess
LCMapStringA
CreateFileA

user32

CreateWindowExA
CloseWindow
SetWindowLongA
CharLowerBuffA
wsprintfA

advapi32

RegCreateKeyA
RegQueryValueA
RegEnumValueA
RegDeleteValueA
RegEnumKeyA
RegSetValueA
RegCloseKey
RegOpenKeyA
RegDeleteKeyA

Sections

.text
Size: 574KB - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ