65b0c7d344ef6b11edcedf57c2331f90_JaffaCakes118 | Triage

Sharing

General

Target

65b0c7d344ef6b11edcedf57c2331f90_JaffaCakes118
Size

36KB
MD5

65b0c7d344ef6b11edcedf57c2331f90
SHA1

6fa025537cf51888accd6ded288374f1c9f1da21
SHA256

b6c224c727a0a90330de3de6638d588874f10904f4d6bedcd21d4c0a83ed6935
SHA512

7075e8e9b07fe86bb25b7536e53f56fd1cda3edc20180c5cd46293f00fd1dfe0cde809c7ff4b222e912493acbea2a28d05a998f4c6e05ab4b936f20250198e2f
SSDEEP

768:MP6S31Ek3FVC8jwVPknVMiFbug1g6bm0/z4Ql8:M1xVCRPyVGMtz4Ql8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65b0c7d344ef6b11edcedf57c2331f90_JaffaCakes118

Files

65b0c7d344ef6b11edcedf57c2331f90_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdb039c6a258daf06049a6553ec80b03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetTickCount
GetLastError
VirtualAlloc
VirtualFree
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 418B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE