149714707a2df0ca9f93164c3f1fda53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

149714707a2df0ca9f93164c3f1fda53_JaffaCakes118
Size

7KB
MD5

149714707a2df0ca9f93164c3f1fda53
SHA1

613b241142619cf4283fd96a80cacd98f669113b
SHA256

3ab30110aa6d6548336ecd0bea3ed2ac4ee1a3a2fba439c53ed99c09ca8d36f9
SHA512

824ece27d092affb582240a16d746c77611507c5edb97323d4f07878fe9afbf48295af5d3033e02e559c2adbe1078a940cf38c25cfc72bb41628b8a92fcaa9e6
SSDEEP

48:ibphGx/7TBztvZRGiBUd+U9X70eBk+bGWaqBSmQ+jfVKzPUR37cgSNS7EVVynOZe:amFRtvOiqsYL1GWaqBSmjGPY7REVVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
149714707a2df0ca9f93164c3f1fda53_JaffaCakes118

Files

149714707a2df0ca9f93164c3f1fda53_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4f1a0d83a4a6444c347ab5a27510e9d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
VirtualAlloc
LoadLibraryA
WriteFile
CreateMutexA
ReleaseMutex
CloseHandle
FreeLibrary
lstrlenA
GetModuleFileNameA
CreateFileA

user32

TranslateMessage
DispatchMessageA
GetMessageA

advapi32

RegOpenKeyA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 512B - Virtual size: 406B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ