ab723227b9b890069b937f7317e9d144_JaffaCakes118 | Triage

Sharing

General

Target

ab723227b9b890069b937f7317e9d144_JaffaCakes118
Size

255KB
MD5

ab723227b9b890069b937f7317e9d144
SHA1

7ca4064ed37eed54d498ca3d4831b2b5b0ea583c
SHA256

a6b9f36c4a18081e1772ace56a81ff67e94d7a6bd6b6fc81a35237c40656810c
SHA512

27906415c03b7a6c6afc008eeac72a74e5dec30b3cbbc87a4883db1e6f9c26095b478e02a1fd6795536ecf1d230227e3e53aeb53b450c34731b65b1470015157
SSDEEP

6144:P4TE1mRi76B3R7XM7WTXJqBD1p2bz3xCBv5+ALP:P441b76B3hXM7WAl2bz3QP+S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab723227b9b890069b937f7317e9d144_JaffaCakes118

Files

ab723227b9b890069b937f7317e9d144_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4794ab1c671125a23da582f6762e7b09

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ