a12ff9d5b939fcc26ab0293e08e8651f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a12ff9d5b939fcc26ab0293e08e8651f_JaffaCakes118
Size

37KB
MD5

a12ff9d5b939fcc26ab0293e08e8651f
SHA1

b2666251a8cf4588dd743d42bcaacc6eba96d88e
SHA256

153e11ced6e43e93a14d8b605eb2b9969fc780b8d3f40731e42be585cc94a5bf
SHA512

d330ced4e9a7f57034f99b0ffe225e20cf15a6c53530f6437b8d2c9eaa907eb1057e8e03861d4e27ef0f2f354b7d4524f96fa68819dcb545e08546357e67a956
SSDEEP

768:wduSZfR79cKmbTMKnCmousXzMfIdXcYcjCda4m4Q:wduYfR5VmfMK10dXcYcGdc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a12ff9d5b939fcc26ab0293e08e8651f_JaffaCakes118

Files

a12ff9d5b939fcc26ab0293e08e8651f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be6df5c0821834325b0b7ace3229a0bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

RegQueryValueExU

activeds

FreeADsMem

ntdll

RtlNtStatusToDosError
NtCreateFile

kernel32

VirtualAlloc
FreeConsole
GetProcessHeap

Sections

.textbss
Size: - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ