acd288d865cf523e8591734a5fcf01c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acd288d865cf523e8591734a5fcf01c2_JaffaCakes118
Size

58KB
MD5

acd288d865cf523e8591734a5fcf01c2
SHA1

15868aa4c792448fade7ced938700dc8060f0957
SHA256

0bb76f39cb98d616d3c26ce78d9799d6a9de05150519b0675a6552f59cc3d0fb
SHA512

8beeead76bbb0a6678884fe3f079e62acd9f717477f0ecfa0a16aebc3ce803f322cc57f73f5a380d290206cde793e1a677a5d942be1f3251de9acc19d6ad19ea
SSDEEP

768:RiIKcov6Ns182OURc2gbA7c3sFck+vTqfv22bKDvfdzlLLvvJnPY5Pjvfu/I:IJGoNOUuA5x0TyQLfNRLvtPY5rHg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acd288d865cf523e8591734a5fcf01c2_JaffaCakes118

Files

acd288d865cf523e8591734a5fcf01c2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dc4f813d4e8f8ad9f2a6ac1b19784609

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleW
LoadLibraryA
GetProcAddress

advapi32

RegOpenKeyExW
RegOpenKeyA

Sections

.data2
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data3
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.dc
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ