85f668d6b8015a8288c24581be7fce29_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85f668d6b8015a8288c24581be7fce29_JaffaCakes118
Size

93KB
MD5

85f668d6b8015a8288c24581be7fce29
SHA1

b223a06eb162541f32d48f75e05167e9ad0994f9
SHA256

84af2a7cd5012658752b2e0cd6abcd3b28be39df918399ff0bb12615adcba2dd
SHA512

47374c82d01c5cc7bdb568570c9dd4d669d35702c040daf96d36a0f5aded68c46f2c59601eb5d55b2923993ab96703306e50e191bc6904ed803642335b0daae5
SSDEEP

1536:4uZQ4OaD0uIwaq7M4KoQuURcKc2sXTc3+yA7TNeNQ5BAkdlFKT17d:H967wf7M4KoQukcRXTaH8TNv0kZKTBd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85f668d6b8015a8288c24581be7fce29_JaffaCakes118

Files

85f668d6b8015a8288c24581be7fce29_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48ae0cc262861eba4723cad29506eab3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ