8309a0b2f35fe2871fe83600ae746990_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8309a0b2f35fe2871fe83600ae746990_JaffaCakes118
Size

106KB
MD5

8309a0b2f35fe2871fe83600ae746990
SHA1

dc21bada73588ff1bf1cb4b0c2b85693c27e8fef
SHA256

72635a3dc99b2bdbac2f383ec436b4355362698a5d542a7ecaa29fed1d75c3c7
SHA512

0bcdb542e64312aa6a2f520b9b76d47fbd793cfb8e6e4ee241530c1ea04613e80945ca4ec298e66176d52c684e03d5761517b634f72c190a52d7d8277cdf4076
SSDEEP

1536:6R7lzRRGRsScPctAoqZL3Ve++4LCEh8V/chaohOJQZoUzdaywYE:6RNfGROWA1A+/L60CJQZoKMyg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8309a0b2f35fe2871fe83600ae746990_JaffaCakes118

Files

8309a0b2f35fe2871fe83600ae746990_JaffaCakes118
.exe windows:5 windows x86 arch:x86

9bf8d187981c9aae532665113e749ffd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
VirtualAlloc
lstrcatA
FileTimeToDosDateTime
GetWindowsDirectoryA

user32

LoadIconA
LoadCursorA

gdi32

GetStockObject

advapi32

RegOpenKeyExA

Sections

.2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.3
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ