8886f42f1863f4d11ff29db39a32670a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8886f42f1863f4d11ff29db39a32670a_JaffaCakes118
Size

13KB
MD5

8886f42f1863f4d11ff29db39a32670a
SHA1

09b1b70a3f759f8c5b12dbfa582ae3a0718c0660
SHA256

a699786901848caa19f35e5020e07043cb0f2e46b51527dc7ccc3c791640a19d
SHA512

53475c5a24bca5b11e43d86dba07125b1748e1ea800f185d6f30cb97bfec244a75ea2e9fa4c14ef9b0eb963e140dba2c000b23bf3de1e119623a4b92a8c1e1db
SSDEEP

192:CIv2bjxCzu6aGwv7aLuIvBvuNKnnErxg9ggIzGRhuprf8zdTksm/Uwuu:9ajxJ6Sv7afvuRrxgGchYUzhc/7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8886f42f1863f4d11ff29db39a32670a_JaffaCakes118

Files

8886f42f1863f4d11ff29db39a32670a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2a55429106b70ba2677bd6ea064d1b81

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetStartupInfoW
ClearCommError
GetDateFormatW
ExitProcess
GetTimeZoneInformation
LoadLibraryExW
LoadLibraryW
GetOEMCP
GetModuleHandleW

msvcrt

memset

advapi32

RegOpenKeyA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text3
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ