8a71259a4621ed7e4ca4b62acc97265e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a71259a4621ed7e4ca4b62acc97265e_JaffaCakes118
Size

149KB
MD5

8a71259a4621ed7e4ca4b62acc97265e
SHA1

dec099a4b631e8024ccf119cd7fa87429e103d5b
SHA256

7ef2c413ea6b0674784e0a6d526aca39e3018e02d82de265974212055fce1f21
SHA512

d3bb566e57510dcb00c5bb75a1331a3b477e6245d096a95be9bb91d3254b04ccc1ecd1e51a0cc0c2bbff2288a986ac3cb534bccb246d12255caf9fd9a1763215
SSDEEP

3072:14Yh0Rh5YrBxyu04ql1AcyHYLIYo3W0184ufAghERwtU+E:14+0Rb2mHnAcEdC4ufAJRy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a71259a4621ed7e4ca4b62acc97265e_JaffaCakes118

Files

8a71259a4621ed7e4ca4b62acc97265e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b946a49b55e8d9ecce26b6acba7dbeba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateFileA
LoadLibraryA
GetWindowsDirectoryA
GetLastError
lstrcatA
SetLastError
GetProcAddress

advapi32

RegOpenKeyExW

Sections

.data2
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data3
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ