75e67c6f53539fe69eac7572cfd0b042_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75e67c6f53539fe69eac7572cfd0b042_JaffaCakes118
Size

256KB
MD5

75e67c6f53539fe69eac7572cfd0b042
SHA1

567218740c1bcd3ff1e7731faad18a3562d0713c
SHA256

f483ee289fb46ab3847ff17b6c7002106e228d3d19dfd4d06210d93b46cd2a9f
SHA512

fecf68b8b01ccc7dee0528c3e66b44f2cee9fccefe8ead08dd73ecc27c3cd8b8432445f90fb66ee705f136b7b71b505f2966143601808ede74a8bc82d4cd4c2f
SSDEEP

6144:eY6kl24UDnr8cAUJA6WH67T54LZ07M4M8NVbkh:n6kSDr8UJv8uTS90oGvbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75e67c6f53539fe69eac7572cfd0b042_JaffaCakes118

Files

75e67c6f53539fe69eac7572cfd0b042_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48ae0cc262861eba4723cad29506eab3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ