39e9b5bd58b8d55fbd5ad99c1f910803_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39e9b5bd58b8d55fbd5ad99c1f910803_JaffaCakes118
Size

36KB
MD5

39e9b5bd58b8d55fbd5ad99c1f910803
SHA1

765a84cbaa56625f6817cc4c7607a7f6aaf5d3c7
SHA256

978499e6c217fbb078aac2a0a82bd27295e89f3fefb1529ac1ceaef7374a525a
SHA512

91f1dd7902a5ba21fbdfb03bab1c2bc7997ccb896523ec54c2b5a2ba0f86faca941669d888d5b7702db9d86681547d403cd5556a7eccc6da5d937064ce3c2bb2
SSDEEP

768:d3Hd/oeSOu2YhMKQ5MqosOFFlv/joRi9Mmyx91C4q9B:pHd/LpYhMKbBFFIx911gB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39e9b5bd58b8d55fbd5ad99c1f910803_JaffaCakes118

Files

39e9b5bd58b8d55fbd5ad99c1f910803_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ead689ba750783347cfd022b0b5b864

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualFree
GetLastError
ExitProcess
VirtualAlloc
LoadLibraryA
CloseHandle

user32

GetTopWindow

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 406B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE