83393cc063b60f6196b6d1983bb2b26a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83393cc063b60f6196b6d1983bb2b26a_JaffaCakes118
Size

36KB
MD5

83393cc063b60f6196b6d1983bb2b26a
SHA1

01382bea9b33bb201c03e18aa3a6d62bc73f56dc
SHA256

ac85795c34df81ae4c968c2319950d1048c0fd76d3d29a611adaf999b0c2d2b6
SHA512

7c25cda5a2e3eeee1bf9391ec6b0dbbb2a6c64e83954cea90bc5e144f8f2da7f3fe8a5fe6d77e0747b62e212a35d607d23faf1fdbff3eb066f4dcca0065a005f
SSDEEP

384:pWNLUh/3Yjupxmrub5I/gI19OG2hoGOltso6GRBMWWMjMXoKvqOJTbQp4+LQMNk:Cc/3YjAxmOI/XOHoEE5WaMXoUX0Nk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83393cc063b60f6196b6d1983bb2b26a_JaffaCakes118

Files

83393cc063b60f6196b6d1983bb2b26a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b46aeed864dc674d458d6df490882966

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
GetProcAddress
VirtualAlloc
VirtualFree
GetLastError
ExitProcess
LoadLibraryA
CloseHandle

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 386B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE