ae59d726107e606eb3a39425a54d5908_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae59d726107e606eb3a39425a54d5908_JaffaCakes118
Size

96KB
MD5

ae59d726107e606eb3a39425a54d5908
SHA1

afaf6b4235bd37faf4fc355bcb6776136f38238b
SHA256

4f571de2de062a916d5762f877f07d165a2ecfd03cc12e597c21bc60bba9b67e
SHA512

a698ab830521b0dce716812e22b6219637eadf071bbfc25159e2e6211db9c61d4e869b9825824aa6db130c4b44dd91c7e1bd5728a4fd1132c243e85527502593
SSDEEP

1536:QFcBAN+70sm2fZGU1+K5Rb6hjOak2KBA7TNedCQy+X4iOCndWht:88A/rOZGU1+KvbBajw8TNuPygsht

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae59d726107e606eb3a39425a54d5908_JaffaCakes118

Files

ae59d726107e606eb3a39425a54d5908_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48ae0cc262861eba4723cad29506eab3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ