acf8e6e79111ce9fd80a0de9aa15bc32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acf8e6e79111ce9fd80a0de9aa15bc32_JaffaCakes118
Size

57KB
MD5

acf8e6e79111ce9fd80a0de9aa15bc32
SHA1

c852ddab6bd1c475fb46dd7e48fc11fde8b20cab
SHA256

d23fbdada055b6d0b50c05a87a221385d84ea8090f1ca5c8420e05b150aefe17
SHA512

bd87d08929f0db6a68a56e75e1d90260a2993d654d7465af96ab27d531f346a2027cc37553ee1fc34b7e00bea071bc597c62138b9cd162ed450e3a14dbe91542
SSDEEP

1536:HKFaxH5HWLDu330SuMM5LFfpCOO4EZ053v:qFMH52L+jM5LFRSHZ0Rv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acf8e6e79111ce9fd80a0de9aa15bc32_JaffaCakes118

Files

acf8e6e79111ce9fd80a0de9aa15bc32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b6ae1aa8f84b421a47440e91d8e096c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueW
RegEnumKeyExA
RegOpenKeyW
RegOpenKeyExA
RegCreateKeyA
RegDeleteKeyW
RegEnumKeyExW
RegQueryValueW
RegQueryValueExA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ