867c4446f2c1a5520afbd086d72dbc31_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

867c4446f2c1a5520afbd086d72dbc31_JaffaCakes118
Size

21KB
MD5

867c4446f2c1a5520afbd086d72dbc31
SHA1

68017a54bc06a3daa9e62a08bb55bf49efe1b1ac
SHA256

5b9f699a56898feb6ad28cf38e95ca1d0351d439e2239562b06f111cd05d5b35
SHA512

35c122ec8ef1d7515af107950729796729ff336e7d54c40fabe61fd6466e60bf38b535cc4490a92deb48d968df50056fda142d5ce9a3277741bfb36d75b3a48d
SSDEEP

384:6AXziqUuyg2oQAM95rsSDIUFd4tCD/P2+3pEonk0pU:6AXzbUlUEg+IU44D2+6s7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
867c4446f2c1a5520afbd086d72dbc31_JaffaCakes118

Files

867c4446f2c1a5520afbd086d72dbc31_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2539d17f40a751400daf5c0ecb83a335

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

RegEnumKeyA

Sections

.text
Size: 11KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2ju3X8A0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.hhqg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE