8640a84dd74c520a02b3703d75553ad2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8640a84dd74c520a02b3703d75553ad2_JaffaCakes118
Size

64KB
MD5

8640a84dd74c520a02b3703d75553ad2
SHA1

73a3af408cd0ea4d04700af961204c9599f31f76
SHA256

c3f20d4e6bb09b6e0d7779f2f9a98c68572b51956cf7c025e1207d6ccf1c4ea6
SHA512

286230fb419f617c737aa7e48e28f6df959b00b94e983fbad8fba93d44650fd79df20411b8cd9b7f071802af843e54aedfda371463b8be19964ba052c4c5c930
SSDEEP

768:l9f2pXaYT2Ddhw1sm2gFsBhKbnaQTbUQWAPaiYd5BFCbLQ:l9f2pzT2DdhakWnbUQkdbFCf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8640a84dd74c520a02b3703d75553ad2_JaffaCakes118

Files

8640a84dd74c520a02b3703d75553ad2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dc4f813d4e8f8ad9f2a6ac1b19784609

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleW
LoadLibraryA
GetProcAddress

advapi32

RegOpenKeyExW
RegOpenKeyA

Sections

.data2
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data3
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.dc
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ