4b9c2c6f03bf6d2a04a42c23cb96fad5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b9c2c6f03bf6d2a04a42c23cb96fad5_JaffaCakes118
Size

4KB
MD5

4b9c2c6f03bf6d2a04a42c23cb96fad5
SHA1

d0ef566ff84812e97e68902984e1a51ce3ab160e
SHA256

4ae14a32142ed5246a6df26a8afab0066388695c69a8eaf61cc15126c9c65b46
SHA512

794068427250877bf147a99343c1d59a60a26586a3984e82659e647d03640d5cf074a0d58da1ff3d9e1e90fbd37b244b563b1f57e0faeb2dd722473b8d944737
SSDEEP

96:yW6R/1vty49yHQxylidAWlBPl/1BDUQf2:yZF4kyHQROWx2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b9c2c6f03bf6d2a04a42c23cb96fad5_JaffaCakes118

Files

4b9c2c6f03bf6d2a04a42c23cb96fad5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f3827113609d9275affddb5aa59fdbd7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance

kernel32

GlobalAlloc
GlobalFree
ExitProcess
LocalFree
MultiByteToWideChar
Sleep
WideCharToMultiByte
lstrcpyA
lstrlenA
LocalAlloc

user32

wsprintfA

advapi32

RegOpenKeyA
RegEnumKeyExA
RegCloseKey
IsTextUnicode
RegQueryValueExA

oleaut32

SafeArrayDestroy
SysFreeString
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayUnaccessData
SysAllocString

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE