c23237ccf0a3bd7115e2dd5228830b24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c23237ccf0a3bd7115e2dd5228830b24_JaffaCakes118
Size

69KB
MD5

c23237ccf0a3bd7115e2dd5228830b24
SHA1

044778591831abd070de5716d0d691efcd451c8c
SHA256

1b8853aa0d32eeb4cd64ea5a40ad386f0e32f68ce5add5d351577813d213bed0
SHA512

6eedcff644331b2339dc2e6f8f2c636c7c6985613e0307fa80b113bac4e597bb05fab2fe68781fa20d012db019133dac3f8c986f30a64d164c368d2249b2ab87
SSDEEP

768:7YkjHya9Txi5mTgqa6pY9s8UZnuWAL+2eauJsD7Ay7MWJS5aA6y/QudhpA:ZHya9Tc6a6pos8+nDoX8+AsJvARQu7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c23237ccf0a3bd7115e2dd5228830b24_JaffaCakes118

Files

c23237ccf0a3bd7115e2dd5228830b24_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c41c37fe0967c42c1e66de79267c5255

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
GetProcAddress

advapi32

RegOpenKeyExW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data2
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ