8c77e9eff21940a756e61ec480642892_JaffaCakes118 | Triage

Sharing

General

Target

8c77e9eff21940a756e61ec480642892_JaffaCakes118
Size

3KB
MD5

8c77e9eff21940a756e61ec480642892
SHA1

3b44106243509651b890b9f63f590c0dde6d42af
SHA256

e5bde4fdb82d770deec745e3f619fd1dff54f91a6afa13e4b6303609165a6e71
SHA512

91b2a1db21f54f0a0cd64c3693e274e3a27c6f19765858e3b183d34bd3ce1b26c8cae0c0008993bccf720f678e0efc6f4b67d805d4c9534b52547949731a4958

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c77e9eff21940a756e61ec480642892_JaffaCakes118

Files

8c77e9eff21940a756e61ec480642892_JaffaCakes118
.exe windows:1 windows x86 arch:x86

0feba48b68178533dea62b681f69167f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetVersion
CreateFileA
WriteFile
CloseHandle

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegQueryValueA
RegQueryValueExA

Sections

.data
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 946B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 362B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ