8a34ecedb77cbfa666a44ae4df2d78fe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a34ecedb77cbfa666a44ae4df2d78fe_JaffaCakes118
Size

254KB
MD5

8a34ecedb77cbfa666a44ae4df2d78fe
SHA1

670d04676e6fdbfb1f9db1a1985c87998abc0d4f
SHA256

45720d96eb80dc85ffe911a5c63425fc37a846e778e09b50a8f45957a25d7b5b
SHA512

fc55b11067f5f05968ac98d7d781d85dbdea591c24d9677f5083ff8005592904e5af0574fd3da51ac6291bac993dbbc2f61214ec4dcaa6204220beca72c7c88c
SSDEEP

6144:FRcS2aGoaW84vazVVQC0caMEL1wM1VHKa/v2:FRZUoaPfIhwqVfe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a34ecedb77cbfa666a44ae4df2d78fe_JaffaCakes118

Files

8a34ecedb77cbfa666a44ae4df2d78fe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1c846d21087d31fb324836c185d419d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
CreateFileA
GetWindowsDirectoryA
VirtualAlloc

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ