8d08543bb6af651cf6ceaf85638538ef_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d08543bb6af651cf6ceaf85638538ef_JaffaCakes118
Size

20KB
MD5

8d08543bb6af651cf6ceaf85638538ef
SHA1

bf724252a824517762c07cc14e0a0929dd094b47
SHA256

942983a26ccce6652d14af302dd6591492ed507c282454c89021750019c58d27
SHA512

e266fbb01043384db76ffcab562089fb6618649a09c9590c7e1ccb57bfb4004cab99049efd3cb6ba39d204c0876dc674fe845140ea3fc88680b2a782bb1d25b2
SSDEEP

384:FJspzh9NlQQtv35b+8qO0cwuUj+dgSR8SXD3p/uMI59hqScwr:c76Qx4830czUw16SXDMncwr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d08543bb6af651cf6ceaf85638538ef_JaffaCakes118

Files

8d08543bb6af651cf6ceaf85638538ef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c1e6b9b4c72d7e5d2d0b7c4900fa90c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetMessageA

advapi32

RegCloseKey

Sections

.text
Size: 13KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 907B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ