01370b2ead84c15f51330a549a9bbe8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01370b2ead84c15f51330a549a9bbe8f_JaffaCakes118
Size

253KB
MD5

01370b2ead84c15f51330a549a9bbe8f
SHA1

0dd00a52e8d8ddc7709b8a90b9915e0cfedcaaec
SHA256

e16fd2412ee34458c4d38b2d97bd04c41cde5c72afeae551246d6cd52b3234e9
SHA512

b36cbe6cb0160aad72b783e34301e645fcee1d9d0eac04bbbbce4bde8088bc02f5aa08447aec63d27f8e546126eec26f4fd79b3a46b97e8c41d433701cd66d17
SSDEEP

6144:smWIW3lGf6PlH9XeIpcteFn4i7P9a0i1zzJeVgFv0kD7:JWIW1Gf61stsVaL1zznFsk3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01370b2ead84c15f51330a549a9bbe8f_JaffaCakes118

Files

01370b2ead84c15f51330a549a9bbe8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7eaac069d48c38b338a6083f98f67de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryW
CreateFileA
GetWindowsDirectoryA
lstrlenA
lstrcpyA

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ