3d3078805e613065e8a0fe542ce3a251_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d3078805e613065e8a0fe542ce3a251_JaffaCakes118
Size

69KB
MD5

3d3078805e613065e8a0fe542ce3a251
SHA1

24bb71bb6da69c9513c506ad4064a9a8879e7552
SHA256

3f5e40b2a91dc4bbe00900f618ebcc312cd15f51ebe5e02c2ef0610e7043c5d7
SHA512

c10b54c89bd9384e3bf40e8acd98ecadf1957a4ad73b80f6ea1aafdf18e52c1008a7686e32bb43ed29afd65375591671d7f19648000daac5e11008f95088ff05
SSDEEP

768:LYR5HIMTwCiIG7xN5ZaY9R8tZeuprRke7uJsDKDy7MWJS5u6y/QudhpA:4HIMTpO5ZaoR8jeUurPDsJnRQu7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d3078805e613065e8a0fe542ce3a251_JaffaCakes118

Files

3d3078805e613065e8a0fe542ce3a251_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c41c37fe0967c42c1e66de79267c5255

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
GetProcAddress

advapi32

RegOpenKeyExW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data2
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ