5d680879455c580f5690d36e80222127_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d680879455c580f5690d36e80222127_JaffaCakes118
Size

36KB
MD5

5d680879455c580f5690d36e80222127
SHA1

e4c672ac4d070c52fc275251bfd14500d7a0911b
SHA256

bc41d60a646c1b8727ee084450c380916aa73a0e49b8effb54ff2b0f2e28d835
SHA512

497de520709c5eacdc42b82d78f1fd8485ff0275ab69e7fad4a5fba1cbd59415f303440683809f642bffa4e1da133e3c84a73e60da781c955f698d5e1262a549
SSDEEP

768:NnNm7AVO+tGy5PiSzt0GUiQW2FjLh5nIFS3UhJ99GQWSmn:TmMI+tGy5aGU7hjkhRGNSmn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d680879455c580f5690d36e80222127_JaffaCakes118

Files

5d680879455c580f5690d36e80222127_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87a004d492a3084f22f428f742c302ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualFree
GetLastError
ExitProcess
VirtualAlloc
GetTickCount
CloseHandle

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE