1a6edc8ffb9540c1bee6af9c40ff0f88_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a6edc8ffb9540c1bee6af9c40ff0f88_JaffaCakes118
Size

64KB
MD5

1a6edc8ffb9540c1bee6af9c40ff0f88
SHA1

66be446e01a83722949f8303cfdbbb6fcd49de98
SHA256

8ac1c68b2f99fff0d36e42b09c4b3df099863fef30284a2441b016cee60354f0
SHA512

27e975c5ad51351d65d603ede2edef488d403253eda5130a78ebc7694e3bb8bc80fa2c157ed77de0099a971a3ec255780f985f7f4265112cb43cf750ab0db39f
SSDEEP

768:89f2pXaYT2Ddhw1sm2gFsBhKbnaQTbUQWAPaieBd5BFCGmQ:89f2pzT2DdhakWnbUQaBdbFCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a6edc8ffb9540c1bee6af9c40ff0f88_JaffaCakes118

Files

1a6edc8ffb9540c1bee6af9c40ff0f88_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dc4f813d4e8f8ad9f2a6ac1b19784609

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleW
LoadLibraryA
GetProcAddress

advapi32

RegOpenKeyExW
RegOpenKeyA

Sections

.data2
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data3
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.dc
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ