47356d0cd913a35eac59f925d596d5d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47356d0cd913a35eac59f925d596d5d4_JaffaCakes118
Size

16KB
MD5

47356d0cd913a35eac59f925d596d5d4
SHA1

1a833f3058360a9608545f46be34c32646981e2a
SHA256

c3e663821d75c22e82aa9e8752c468d29b170941822bb552ea5abdce3a45241d
SHA512

e8cad8880ffbd3004047b37f326c98827230183adb44654a2fac00bb005635a6ea9b8ea3e3be6271c15d467466cb90186e4c80e26ab0812430c36ee929f316d1
SSDEEP

24:eH1GSyilXN4EOR0/RdmEpQZy2KZ+8n77oXm:yy04C/0CZ+ooXm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47356d0cd913a35eac59f925d596d5d4_JaffaCakes118

Files

47356d0cd913a35eac59f925d596d5d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ce722d6246323822a93874314721c9ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
CreateThread
Sleep

advapi32

RegCreateKeyA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 213B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE