0007e6f75ea7c5394a14b938cfd04f0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0007e6f75ea7c5394a14b938cfd04f0a_JaffaCakes118
Size

197KB
MD5

0007e6f75ea7c5394a14b938cfd04f0a
SHA1

c1821cfa606b28db0b3e1271e747ed316881e32e
SHA256

6b20b900d614552409ad3f622d2cae8bd697b8e327f004e09bd674e1aeecf844
SHA512

a30e8d3c2eab2225e501c8e2b188f6c535e73774cec51e1e358781bfdb171101eb4c39a419c6ead1b954caacbe744355e9ff291c7342d21157274d0fc86d87a7
SSDEEP

3072:o49MMwQFNW11va+LNuQolMMvGtAYtayzO:DH+LNcK/0yzO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0007e6f75ea7c5394a14b938cfd04f0a_JaffaCakes118

Files

0007e6f75ea7c5394a14b938cfd04f0a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6614324412dfbf21ba5c6a7962b4f63d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegEnumKeyExW

kernel32

CopyFileExA
GetLocalTime
ExitProcess

user32

AppendMenuW
GetWindowTextLengthA

Sections

.kgpmj
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.kklhj
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.obclm
Size: 136KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.amnbj
Size: 512B - Virtual size: 317B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ