b961c5d72a256474857e628d689b2174_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b961c5d72a256474857e628d689b2174_JaffaCakes118
Size

423KB
MD5

b961c5d72a256474857e628d689b2174
SHA1

980ef7f222aeea069f7cf48af283e688bfb8e17b
SHA256

0a61e6abd84917e00ee7137dfc291878b908528f663628ffff025a41367c9f31
SHA512

19e07497d21ffeffc6abac22822e21a12e3b33fb123308ff25a1e4500ccefdacae21f26fb91ff9af10fa9ecce8c83ee76430148d78275cea8a3fc921fce1432d
SSDEEP

12288:l5sFsub0diyUj3rqg6bL8JHY5O5uzBYksve3uK:l9iy2GpbLWHNkekj+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b961c5d72a256474857e628d689b2174_JaffaCakes118

Files

b961c5d72a256474857e628d689b2174_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ff860454f7614ed9673c3d3c730f101

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

CharLowerW

advapi32

RegCloseKey

Sections

.bss
Size: - Virtual size: 192KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 101KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE