4184b20b15691cef0ef51d75e401e4d4_JaffaCakes118 | Triage

Sharing

General

Target

4184b20b15691cef0ef51d75e401e4d4_JaffaCakes118
Size

36KB
MD5

4184b20b15691cef0ef51d75e401e4d4
SHA1

9fcdd4abedcd434946f8ab2fb41e3bd8ba236635
SHA256

0716d57ba9c84104089db44f8a502df15ac6607b9efb9d73ccf234f0170eefd2
SHA512

45b2955bc942a70b9bf90afce6ddc1ac80f8edee2714b58b95ebba52568159d9260c8c2c3b129fe3ac785d99013bdff7a6349a6cab66110c7679c9b700291582
SSDEEP

768:n40ulaP5+rYbFB3+BKmFI1J2UTuaWLpzdttE6BlmFyYyJz4Md+:n40ulAkWYKyIhuasppnPB9z4Md+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4184b20b15691cef0ef51d75e401e4d4_JaffaCakes118

Files

4184b20b15691cef0ef51d75e401e4d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdb039c6a258daf06049a6553ec80b03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetTickCount
GetLastError
VirtualAlloc
VirtualFree
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 418B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE