JaffaCakes118_1285a527f4aabbcd9421cf23ff840b2a | Triage

Sharing

General

Target

JaffaCakes118_1285a527f4aabbcd9421cf23ff840b2a
Size

452KB
MD5

1285a527f4aabbcd9421cf23ff840b2a
SHA1

9a88a9c4adc026bf339e5ed45f1d7ebaa684b158
SHA256

ab5dd49f5137c241ab1490f9a880f1935a1cc7ec40d8e007d8965d28bbe53034
SHA512

b850ebac3c153358bee7eb82e216b0f3de24055bf61bf551fa5ed9bb9ef302b115a560400762b8eaa7e4aa19b9a03941a64c0757b1716a6e72ce0ca4c9e5d1d1
SSDEEP

12288:eaSPgOguJJJJJJJxc14rqQg9pKZP1pekOAvFzrWJ4S:dOg+GZcZP2GFzr64S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1285a527f4aabbcd9421cf23ff840b2a

Files

JaffaCakes118_1285a527f4aabbcd9421cf23ff840b2a
.exe windows:4 windows x86 arch:x86

ca3dfee97fe435bdf8b51e2476d2ce1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
CreateFileA
ExitProcess
GetCurrentProcess
LoadLibraryA

user32

CloseWindow
wsprintfA
CharLowerBuffA
SetWindowLongA
CreateWindowExA

advapi32

RegSetValueA
RegQueryValueA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegCloseKey
RegEnumValueA
RegDeleteValueA
RegEnumKeyA

Sections

.text
Size: 430KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ