b48f7c11688584d5ca40e0b4d0160e59_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b48f7c11688584d5ca40e0b4d0160e59_JaffaCakes118
Size

96KB
MD5

b48f7c11688584d5ca40e0b4d0160e59
SHA1

4ee9664e29a4d61e4c222dae1fec2bca94a61587
SHA256

0c3a124962667b224aac3ca2424ac99f45c76bd92e25b3754170dd414fe90422
SHA512

344eacccdbb7d0e54b1747c9874ed0767b016c5ed6ea45320f119bec61a0f6f4071c61d6f6cd7a79247bc6d1354c5ab41a4741580051a435158965d653ef11ce
SSDEEP

3072:wV8kcD69TjDEvxFqb1ITEY8TNqbJz9vIoIY5B:wV5O+nDEzqb1ebJz9w0B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b48f7c11688584d5ca40e0b4d0160e59_JaffaCakes118

Files

b48f7c11688584d5ca40e0b4d0160e59_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48ae0cc262861eba4723cad29506eab3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ