6438f6c7242963c3750cf55a25f52d44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6438f6c7242963c3750cf55a25f52d44_JaffaCakes118
Size

23KB
MD5

6438f6c7242963c3750cf55a25f52d44
SHA1

85f81dbc583bf55902fc74a6d9e382b29f51b0be
SHA256

9e952bf7f61b47d427a08f99743588654b0a15d6b02203bebbed9823f02d5cd3
SHA512

716b794a3a99cd22a3af706b7fb1c3b49812b2cb923d52c3f8ecd0a3a0a9476cccccba83f4945079718009dfc99e3f201d4f001bdc7cb6fd2391f81ba54cd928
SSDEEP

384:9VTGVyIfW3gyoRjtnt2sJOwbzB0uFLPtV5HQJlQcHRwNmO8XydertHXQH1w3psOA:9VTG1lL1tpJ708P75HOGoRwJ8Xys5HAR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6438f6c7242963c3750cf55a25f52d44_JaffaCakes118

Files

6438f6c7242963c3750cf55a25f52d44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1e6b9b4c72d7e5d2d0b7c4900fa90c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetMessageA

advapi32

RegCloseKey

Sections

.text
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ