d66a8277f04b4f35d1ea2e3251aa4c6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d66a8277f04b4f35d1ea2e3251aa4c6c_JaffaCakes118
Size

36KB
MD5

d66a8277f04b4f35d1ea2e3251aa4c6c
SHA1

760e5b21d2dc49bda5e7075707e80ca3e784e196
SHA256

1cc79f4656fd45a72c03b4f26c5db37aeb8ff7b4fdb1228f79def3311bef6128
SHA512

7694d30a7b937e07852469645398c7f2fa07c60419ab5b5c89eb5d0303e417a8e7e2640c32b40a15b3a4ef11a323f3784e4cb9166f4fb822aa5a50a11b662321
SSDEEP

768:El2YDSfmcY2aQZT9VyVcY3i1GGTzIwTbfXiyDLz4eL:rYDSeczLY3iNTzzbfSyDLz4eL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d66a8277f04b4f35d1ea2e3251aa4c6c_JaffaCakes118

Files

d66a8277f04b4f35d1ea2e3251aa4c6c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdb039c6a258daf06049a6553ec80b03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetTickCount
GetLastError
VirtualAlloc
VirtualFree
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 418B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE