JaffaCakes118_684886c4bd1bec3afd3b86b0faf20e11 | Triage

Sharing

General

Target

JaffaCakes118_684886c4bd1bec3afd3b86b0faf20e11
Size

404KB
MD5

684886c4bd1bec3afd3b86b0faf20e11
SHA1

3734ead60ffbac97375537ed963079ba3f288899
SHA256

daa4400d55f39bcfb90ddcb04707e37b47284c081aafeac4bf8a2a625a9818ae
SHA512

d6228f0ecda9d3313689de7df18d3df96124ee4cee532771b63d21dfa9ee152e350efdc129f824e4c24f997cc3f642a8f3c9fd0894bb1a274ccb38ddd606fc0d
SSDEEP

12288:nW1Yn7JVriPMhuDzemoi5OGOpxhtDZoFRHn:nqYLrSqu9o/vtd6n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_684886c4bd1bec3afd3b86b0faf20e11

Files

JaffaCakes118_684886c4bd1bec3afd3b86b0faf20e11
.exe windows:4 windows x86 arch:x86

8a48798b69ee301c4b8a12ee200b35d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
ExitProcess
LoadLibraryA
GetCurrentProcess
CreateFileA

user32

CreateWindowExA
CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow

advapi32

RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyA
RegCloseKey
RegEnumValueA

Sections

.text
Size: 374KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ