2a48fe3fb2856998599c527c7592f225_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a48fe3fb2856998599c527c7592f225_JaffaCakes118
Size

41KB
MD5

2a48fe3fb2856998599c527c7592f225
SHA1

7a940f3d3b32d43418e039887f6c7300c473ff60
SHA256

91359eadb85c0aad96d9fe278e4ff859f176c32bebb4197df1a5f0c9859d172d
SHA512

4a239f5325d5c19023c9d1b72a8ee6e962fddb671273360f99de6bb399c1b8718a2ba6ff35e1a74da96e2f320acbc5032b7b85e50a6439e20ffbf2b3d411e3c3
SSDEEP

768:PT2BLrW7WF0aXgvV43GbzXuTonWvifxO2ib7SgusyZwf:PSBfW7WF0qgvVvbsexO9XSglye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a48fe3fb2856998599c527c7592f225_JaffaCakes118

Files

2a48fe3fb2856998599c527c7592f225_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f0dfee4b0ee76279ef4b8f5de031519

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetVersion
LoadLibraryA
GetModuleHandleA
VirtualFree
WriteFile
lstrcatA
GetModuleFileNameA
ExitProcess
CreateFileA
VirtualAlloc
CloseHandle

user32

EnumThreadWindows

advapi32

RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE