06896b34a344e6553329a70640ee1320_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06896b34a344e6553329a70640ee1320_JaffaCakes118
Size

59KB
MD5

06896b34a344e6553329a70640ee1320
SHA1

b80cfba05978de10380fb509d9077e1b09d2548d
SHA256

70545c43ebfbdd1525c29e95db61e9b50384c3ebe37c3c2ac980b317f60786ba
SHA512

347ea2b8b98501ab0c4cd496a0ac00fc57a1d0924e900d1b2d404a0e87e23f1a4a9f6be965dbbc04eaf5e715b3e7fc62e0a2e300e69a2ba366ef80c1a0523909
SSDEEP

768:y8uj8aIcdXpe9t9F2xP1SKjTR15fY39Hoa30F8Zkp3BYQof:y8EOcdXp0tTKi39b30mZAxYQof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06896b34a344e6553329a70640ee1320_JaffaCakes118

Files

06896b34a344e6553329a70640ee1320_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2b47f0c8702f82f49cf00c5fc844975d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

advapi32

RegOpenKeyExA

Sections

.text
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE