JaffaCakes118_1d4876957c7273b09848839d7f9161fa | Triage

Sharing

General

Target

JaffaCakes118_1d4876957c7273b09848839d7f9161fa
Size

300KB
MD5

1d4876957c7273b09848839d7f9161fa
SHA1

6fce17d554492814fc8b603c79ea20932caecbff
SHA256

1a4755ba998b10a4a4f0db268e4324af1453c9c6d1e12998275116e691eeb850
SHA512

8964ceb8e3d006192de58caf5703cd1fc7d0b3359901a898ec0b3a599029f109c058c91c48df580724287ee7348495254395b5476544890ba71ee2ed84687841
SSDEEP

6144:BxOZDEYse1072Y1VjBgjcPAG/rFbYTs9IMuLq3MgqjoG53O:tYsx2Y1VjBgjANDFqsyjoY+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1d4876957c7273b09848839d7f9161fa

Files

JaffaCakes118_1d4876957c7273b09848839d7f9161fa
.exe windows:4 windows x86 arch:x86

aa539eb8b06af9da03d9acd39cc06784

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA

user32

CharLowerBuffA
CreateWindowExA
SetWindowLongA
CloseWindow
wsprintfA

advapi32

RegOpenKeyA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegEnumKeyA
RegEnumValueA
RegDeleteValueA

Sections

.text
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ