dd252485e84562a271caf72285cafb8e_JaffaCakes118 | Triage

Sharing

General

Target

dd252485e84562a271caf72285cafb8e_JaffaCakes118
Size

38KB
MD5

dd252485e84562a271caf72285cafb8e
SHA1

204df40faacc91b04490e635db36a10dd74c9299
SHA256

8aa23e1ffcfd84d87005696ade264b1fdec7d6514636196066b9eb5d4046933f
SHA512

a5c416f55f0faa6f8f479d25ad2b5fe85150fb5e873fff44140dfcea2fcfc49fc97b63180225fa22647f258cb48f2d2ffae5bae4b0cb5cfe3e634769105b7f9f
SSDEEP

768:vRxJrMLjAMG/dY1E3Fybh6qzpEWvWZKxgXGwvE5jpPcyvVK7fnQnpzgz4:drML8Bv8p78CevKjm7fnQnpMz4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dd252485e84562a271caf72285cafb8e_JaffaCakes118

Files

dd252485e84562a271caf72285cafb8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdb039c6a258daf06049a6553ec80b03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetTickCount
GetLastError
VirtualAlloc
VirtualFree
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 418B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE