2384ebb8b29a1c8b7c5c18d028b3f3b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2384ebb8b29a1c8b7c5c18d028b3f3b5_JaffaCakes118
Size

256KB
MD5

2384ebb8b29a1c8b7c5c18d028b3f3b5
SHA1

4f542476a8ed55ae1cb79bb9c0d3ddf0b066a57f
SHA256

e609684c0ab341228b7745b1c779c33d5b528d33b966b3af24c0dcabb6c323e7
SHA512

c3b94c1c8bcc326f65d562b47e6d0810c8fde145a2e8237623c932e73b69a0447a6d96f15ee995319bd629569d45ab256936077bca6726bba5a8347b514dcfff
SSDEEP

6144:oYQkl24UDLr8cAUJm6WH67T54LZ07M4M8NVbOc:JQkSDv8UJp8uTS90oGvbL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2384ebb8b29a1c8b7c5c18d028b3f3b5_JaffaCakes118

Files

2384ebb8b29a1c8b7c5c18d028b3f3b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48ae0cc262861eba4723cad29506eab3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ