211cc497896db3ea1f99f4213376005c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

211cc497896db3ea1f99f4213376005c_JaffaCakes118
Size

161KB
MD5

211cc497896db3ea1f99f4213376005c
SHA1

0103079d81ec9cd17e78557eaf1ad51968613dc2
SHA256

c63e7cb2d9dc381976aa4a4387d32166f4ccb6f83ce6c27a2545181437d394a4
SHA512

b2024bdf49ed22c3cfe47956cc2f07a130b13ec95c32b4826bd177cc5199f21416574c96a43a9fc3854a16f9f546e259fafc6d57f2eb9b0ebfd891569e585676
SSDEEP

3072:fM0JZnlOjpZ9YpuF13/LIhqxGiFWu69+g2JuL8:xlODqu73mqx1Wu69+3Ju

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
211cc497896db3ea1f99f4213376005c_JaffaCakes118

Files

211cc497896db3ea1f99f4213376005c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ab3b8533a19e0e29d2d84b87222ffc88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
GetProcAddress

advapi32

RegOpenKeyExW
RegOpenKeyA

Sections

.data2
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ