4507a35882a7e89eb990dd9724488627_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4507a35882a7e89eb990dd9724488627_JaffaCakes118
Size

59KB
MD5

4507a35882a7e89eb990dd9724488627
SHA1

c81f356283a176c9d2c5b7b42503050c0cd4c8b1
SHA256

42c261414b7b63d08fde2515d9a8edffbf0324c73bf25799b11df80ee149994b
SHA512

e2e29d3dbb5fb0dce99f85e1d036ad23db5b322a646d2a5e4c13a371fae0b97264e5da385f2e8f93849b5a1aac88ce86184b7c1e427bf0d3060478ceea9c1fb1
SSDEEP

768:q47hQieaHQGu1oxON/eHk0sJo8SgiucPx9C9dYk5i/i96HwVcfkUEV+4N7AEF4Rm:qPGHxHOJsk0AtSgSlB/FScfrnEF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4507a35882a7e89eb990dd9724488627_JaffaCakes118

Files

4507a35882a7e89eb990dd9724488627_JaffaCakes118
.exe windows:5 windows x86 arch:x86

abfaa38372d6f1c7db1e20b6cdedbae1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetLastError
CreateFileA
LoadLibraryW
GetEnvironmentVariableA
LoadLibraryA

advapi32

RegOpenKeyW
RegOpenKeyExW

Sections

.data3
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.ddd
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ