670611daedac5222659a63b1443038a9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

670611daedac5222659a63b1443038a9_JaffaCakes118
Size

38KB
MD5

670611daedac5222659a63b1443038a9
SHA1

915385d980fb435893c51d5a5fa9a625b68a828a
SHA256

ae6559183aaa20db90db325e7ba149a01a31e52cdce2d7f59104e14022a3bc7a
SHA512

309386c25dbe4e8078f2098b24fa4f61017f798abac88e5198ea689151b0d20c60b73a25deff2b2d707743a2555109f21be2b4e1fe16d0959777dc489cb490e7
SSDEEP

768:WRWfrRt13lKkJt62G0cPab+KC1jV75jD3rcz/yNi5ebS4h8YRNStrNHda4m4Q:WMrH13lKkvxCv5jDbI/8eYfStrNHdc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
670611daedac5222659a63b1443038a9_JaffaCakes118

Files

670611daedac5222659a63b1443038a9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4208bf34179b3d86bc387758ce186f2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

activeds

FreeADsMem

kernel32

HeapFree
VirtualAlloc
FreeConsole

crypt32

RegQueryValueExU

ntdll

RtlNtStatusToDosError
NtCreateFile

Sections

.textbss
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ