264241e586b6ff7f1c820eeddd8da3c6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

264241e586b6ff7f1c820eeddd8da3c6_JaffaCakes118
Size

59KB
MD5

264241e586b6ff7f1c820eeddd8da3c6
SHA1

4351d364edca7c8a9d0650312cf4491ebb3d1c59
SHA256

13e8a9977809d1cd9dd05b731cb51faaaaa184484b3d5dba71f2cfb5b5c9bd06
SHA512

c1731e59c82cd1db5373a0abb45bb56b517a5a9b2e8229503b1054c8828db5c9670d751dbd760e436b8caba0d09949ea709f099539e6f8d8596471913c248158
SSDEEP

768:k4ShX/eaHwaW1px+NPeHk0cJo8SwSuc/w9C9dYkN7y/i96HwVcfkU73+40ayjzpN:kxlHN8+Zsk0QtSwiIh/FScfL6aspF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
264241e586b6ff7f1c820eeddd8da3c6_JaffaCakes118

Files

264241e586b6ff7f1c820eeddd8da3c6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

abfaa38372d6f1c7db1e20b6cdedbae1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetLastError
CreateFileA
LoadLibraryW
GetEnvironmentVariableA
LoadLibraryA

advapi32

RegOpenKeyW
RegOpenKeyExW

Sections

.data3
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.ddd
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ