5f76a32b1ad5c89a603c274ab0f6c2b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f76a32b1ad5c89a603c274ab0f6c2b2_JaffaCakes118
Size

38KB
MD5

5f76a32b1ad5c89a603c274ab0f6c2b2
SHA1

046df239803c33d0d649b16545ecd8f26c122e16
SHA256

dc37f23f182ab99a075d52143bf60aee7757e9faee6f85a69a872139ee00796a
SHA512

7497b45be4e9ccbeffbbfb525550b4864f06ea80c2e31ee40637ca6615088c810bb297d3e0fe9568db7519af3c00d1ef32807f27e51daa8f9f79464ac47417b6
SSDEEP

768:vlz97ytH/g7344GbFYEYMQizTymb9rkvSWeUkwW5:vH7zM4GbFYEY3CkvheU5W5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f76a32b1ad5c89a603c274ab0f6c2b2_JaffaCakes118

Files

5f76a32b1ad5c89a603c274ab0f6c2b2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d45a2db2797a73556dda33f903e00e06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualFree
GetLastError
ExitProcess
VirtualAlloc
GetVersion
CloseHandle

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE