25889db9ed364fdca840665bf7937b4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25889db9ed364fdca840665bf7937b4e_JaffaCakes118
Size

184KB
MD5

25889db9ed364fdca840665bf7937b4e
SHA1

232558fa46f9cf46af4dd0bb5b4686cdab2438e6
SHA256

8634940d77cf5ec0c401d7982b547ce66aeb576882307e1fa3684e6fded30671
SHA512

3abaecd0ef9f42e591f444afb47379f66fce8699ded01271c1d9068224d5f7a9761276e61fa9c14f6a4350e36e79d30ab8e8acc2976c9dbf88d84374a1fef6b3
SSDEEP

3072:tgDh0r3UROkazuW1MCcSPv8ucpPVy/DcACTwd1eVI4WLFphMie8Jem7GNEHu:/kazpMK8FGiwdF4W5MiemHu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25889db9ed364fdca840665bf7937b4e_JaffaCakes118

Files

25889db9ed364fdca840665bf7937b4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

75520b66ba9535e1c9f02d0d2a6924c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegSetValueExA

rpcrt4

NdrFixedArrayFree
UuidCreate

kernel32

FlushInstructionCache
UnmapViewOfFile
DuplicateHandle
GetModuleFileNameW
EnumResourceNamesW
SetEnvironmentVariableW
FindFirstFileA
FindResourceExA
MapViewOfFile
FindClose

winmm

timeEndPeriod

shell32

Shell_NotifyIconA

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ