76fd38f1e27b0c9052a0b2b1a307c47b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76fd38f1e27b0c9052a0b2b1a307c47b_JaffaCakes118
Size

3KB
MD5

76fd38f1e27b0c9052a0b2b1a307c47b
SHA1

bba27a248b112d44ad34eb411668a62dab7056fd
SHA256

4d9337738190d2e5ba71a6e03e327c342da837828277716d03b08a8799ad28cc
SHA512

0db0a8264b627adaee2bf6b4e7037aeba9aeb25fd417f570833c4cb729a979f91d2ec3441118dc53af6d92aa9ef76d30705cb96a10bf55030ca22224093ec36e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76fd38f1e27b0c9052a0b2b1a307c47b_JaffaCakes118

Files

76fd38f1e27b0c9052a0b2b1a307c47b_JaffaCakes118
.dll windows:4 windows x86 arch:x86

a701ff36b570b0b6bdaedf3cf341239b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOpenKeyExA
AbortSystemShutdownW
CryptDuplicateKey
RegEnumKeyExA
RegQueryValueExA
ClearEventLogW

kernel32

GetModuleFileNameA
GetLastError
GetVersion
LocalAlloc
VirtualAlloc
GetFullPathNameW
SetLocalTime

Sections

.text
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ