a9090281b2c4c9ffbd9201561ca7958e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9090281b2c4c9ffbd9201561ca7958e_JaffaCakes118
Size

96KB
MD5

a9090281b2c4c9ffbd9201561ca7958e
SHA1

66dd3c7fdb39480f2b7ecad5497f97f0ad531362
SHA256

d6d01b504d4f107f81ae46a9d911cdafcca6d7bf6cdc0e34fa1998bf8b95abda
SHA512

9392dab6f2477d6d696e51787001a0f2246ac50ecffaf86203aade458f260eeaf7b6ea215a37cceaff8e7f72305fc7a562bc16f35654a5ed4a67b4ce86a89e3f
SSDEEP

1536:OuZQ4OaD0uIwaq7M4KoQuURcKc2sXTc3+yA7TNeNQ5BAkdlFKT17c:J967wf7M4KoQukcRXTaH8TNv0kZKTBc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9090281b2c4c9ffbd9201561ca7958e_JaffaCakes118

Files

a9090281b2c4c9ffbd9201561ca7958e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4794ab1c671125a23da582f6762e7b09

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ