c0a3602e2dcb33081a8171537a4f043e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c0a3602e2dcb33081a8171537a4f043e_JaffaCakes118
Size

256KB
MD5

c0a3602e2dcb33081a8171537a4f043e
SHA1

305ff54cb2b7a46526f39818d7fdbcf8c53d2595
SHA256

45f158d826b96136f00898ba7923291bde7b406dc1b332c5e2cae7332464c044
SHA512

b5feb7bcec4632875fdc7105b2d5613fbbab6cbf39b7006abea79b6436e9b135643a30df46f231ec793f337a4d8e65ce2533dbf7418f1d761b6b0a752901d995
SSDEEP

6144:NYWkl24UDWLr8cAUJa6WH67T54LZ07M4M8NVb4qv:mWkSDWv8UJ18uTS90oGvb4o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0a3602e2dcb33081a8171537a4f043e_JaffaCakes118

Files

c0a3602e2dcb33081a8171537a4f043e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48ae0cc262861eba4723cad29506eab3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ