adc656278045a4aa28587ea7707e54ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adc656278045a4aa28587ea7707e54ab_JaffaCakes118
Size

35KB
MD5

adc656278045a4aa28587ea7707e54ab
SHA1

852b939541372abbef71b974e619c8795c5dc0cf
SHA256

166efdcb17a3735c5226a076d64f99101f9748f51ee20170a76d5475311a5604
SHA512

ccd9204308176e4df560847818d636883b09efadc0966040b6cd7b7f311ee86da12df6d7856b724c41bece933183ce0709a3b57ca4312d7cc17132ca78f08560
SSDEEP

768:HykP8eCqLx/h//JXfrEvRKhwIOPZpZSuDXhsk9QXbX9:WMLRh//JX2whwIOxjh7OJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adc656278045a4aa28587ea7707e54ab_JaffaCakes118

Files

adc656278045a4aa28587ea7707e54ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbda323535748a93bd25585a25cda8b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
LoadLibraryA
GetProcAddress
VirtualFree
lstrcatA
GetLastError
ExitProcess
VirtualAlloc
CloseHandle

user32

EnumChildWindows

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE