5b9bdfefe8bbc2e046adeb711a912164_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b9bdfefe8bbc2e046adeb711a912164_JaffaCakes118
Size

15KB
MD5

5b9bdfefe8bbc2e046adeb711a912164
SHA1

56d73d1df169c936b5b69a7e187be9396326b490
SHA256

ea9a7e9f4aea1c9d18aaebbfc78d56b51890e8cfd3a75e7594057bfc8699a4ed
SHA512

7c5860083a6fd73cd3764237c16f2a15268c29c042d68b84e0157d03a572240cb0d862e0781a8caf6ceafc48fa4bfa381b8cdd0f2d198ceb8d05fa75ccf5d11e
SSDEEP

192:SAuKz9l6P7mWi96d22WjaokRl13Jlmi2VUiKaj+Vk4vL:luKbWmWi96d2PYVJlmiuUipL4vL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b9bdfefe8bbc2e046adeb711a912164_JaffaCakes118

Files

5b9bdfefe8bbc2e046adeb711a912164_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4f4c45e15e0c469158548704bbc0adf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey

kernel32

GetCommandLineA
GetProcAddress
lstrlenA
ExitProcess
GetModuleHandleA

user32

GetDesktopWindow
ShowWindow

comctl32

InitCommonControlsEx
InitCommonControls

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ