3c1d2e8b13e9e491c8ec9d8e74b2f79f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c1d2e8b13e9e491c8ec9d8e74b2f79f_JaffaCakes118
Size

32KB
MD5

3c1d2e8b13e9e491c8ec9d8e74b2f79f
SHA1

14b25a484c76b2529c30edac63dc9a5464c1f0e8
SHA256

c668c4565f7934723e8823621fcee08a29d7b17c5362a92cd9bb15b25eb70436
SHA512

8a962477ae9e944fe9628df9e9473b055ba7cebb23fdf49792a5a3dfe1e0a68c20ba7788faaa9d9fc4b7f889bbf67e75ce8dc50d7cfda3b3c1ff8ae158161567
SSDEEP

768:Xfu9go/OMASN9atK1wnsujcaZNzzc4jHVU:mn/jN9lsFZNzwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c1d2e8b13e9e491c8ec9d8e74b2f79f_JaffaCakes118

Files

3c1d2e8b13e9e491c8ec9d8e74b2f79f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8645f019678da2fd2f6ec9f9b669b5b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE