5d8a0366915935e25adae3fbb01f7be4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d8a0366915935e25adae3fbb01f7be4_JaffaCakes118
Size

36KB
MD5

5d8a0366915935e25adae3fbb01f7be4
SHA1

4fabb71d5e91bfe8592e3475a1e5c67608d05820
SHA256

5b7f648064bea5e64e85c52825d128832ee1fb45bc8f295dec9f8e3ae419007d
SHA512

d5227c263f6cac2e4cc40ee54bda9d1e6006099de57da352a693129e9388274db231b1d48faeccb5f01387d57232e9090453013f8e2826d9f7aa08a4efc02e40
SSDEEP

768:t62SRWBG2U1icP2REhXP6Ah8/Kz9q+JVvIyzytdt6NN:tPKWBGPPqExzoC46X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d8a0366915935e25adae3fbb01f7be4_JaffaCakes118

Files

5d8a0366915935e25adae3fbb01f7be4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87a004d492a3084f22f428f742c302ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualFree
GetLastError
ExitProcess
VirtualAlloc
GetTickCount
CloseHandle

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE