e5e0a3d9a93029354095bdd76f5bd4f7_JaffaCakes118 | Triage

Sharing

General

Target

e5e0a3d9a93029354095bdd76f5bd4f7_JaffaCakes118
Size

392KB
MD5

e5e0a3d9a93029354095bdd76f5bd4f7
SHA1

6ff485a389c093fcd7a6a11c2c16723c8021e37f
SHA256

3ede4955f949630f330b7c08153ece85689c1c903ff0d68e01227bb2c0b38763
SHA512

fa02a886326fe113c4e8eff5b1be20dbefdebbdd518f7cd7b7891459d03688446f5ac0d3629db84225386e32d9716c43c4f2630029645fd4d5c96c7818923878
SSDEEP

6144:pn0as5yO/CrrL9mPgSvzi7TNo9b7UzBRt7cMhn4E9gQ458csvCIELnbfq9BSJOCI:pnAgwCr4oozaTDBR6e1Z4PsaIE/ySJq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5e0a3d9a93029354095bdd76f5bd4f7_JaffaCakes118

Files

e5e0a3d9a93029354095bdd76f5bd4f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0bcb9c84fc2e12472f17331c5499d452

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CreateFileA
GetCurrentProcess
LoadLibraryA
CloseHandle
ExitProcess

user32

CloseWindow
CreateWindowExA
SetWindowLongA
CharLowerBuffA
wsprintfA

advapi32

RegEnumValueA
RegQueryValueA
RegCreateKeyA
RegDeleteValueA
RegCloseKey
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA

Sections

.text
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ