db8bb045f3ecf3e1be99380ba3315902_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db8bb045f3ecf3e1be99380ba3315902_JaffaCakes118
Size

24KB
MD5

db8bb045f3ecf3e1be99380ba3315902
SHA1

196fe0fe9c4ae1e099f0bbb1c8d5604e2eda6343
SHA256

9c145a3067f5c13433a88dd3768f84f7e2698eccdc99366bb04a4e87681c3a6d
SHA512

f47d75d3840a826d3a3f21558d053a6ef41987da1a8f1d34a0c513634a92c72f1aa26f23fe85be7d777df7fb7af91d12f55a3450b5fa682fa9defdd57555928e
SSDEEP

384:J6exbQfDFKqgyv8wnY7waVU/8avdfa9OK+CBDiwIIXfIo4ajuEh3Dy:Jx0Y7wy0ndfzeiw/ABajh3O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db8bb045f3ecf3e1be99380ba3315902_JaffaCakes118

Files

db8bb045f3ecf3e1be99380ba3315902_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4099ddc5a4cf72d27b12ed57e9ee26eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleHandleA
GetProcAddress
GetSystemTime
GetVersion
ExitThread
ReadFile
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE