de30286cf04e0b2e9b7bd9b8dca9c4ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de30286cf04e0b2e9b7bd9b8dca9c4ce_JaffaCakes118
Size

1.0MB
MD5

de30286cf04e0b2e9b7bd9b8dca9c4ce
SHA1

c1c24b703d225cf2db0cc894691c666d59515886
SHA256

9952d8a8c37fce8d765d286464a7fb891f12b86e2fe7e8eb56a77ac0cd02b840
SHA512

fefbb8f0c1684b0a631c31490341d919b4e47fcb35f74169958dcbf5a4f183ace5e3074c07b874360f0f2048ac992eb15597d33ec4fea2d422534f4928287f77
SSDEEP

24576:P9INiAHlMoyLwlzRiJdy8ZoZ5Dy3ppvIokfYxd3:P9Q6oOGQO5cpvI7O3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de30286cf04e0b2e9b7bd9b8dca9c4ce_JaffaCakes118

Files

de30286cf04e0b2e9b7bd9b8dca9c4ce_JaffaCakes118
.exe windows:5 windows x86 arch:x86

86f5f9e2f0ec10844d53d7d5c0e5efa4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

msvcrt

malloc

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

kernel32

QueryDosDeviceW

user32

IsWindow

advapi32

RegOpenKeyExA

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 893KB - Virtual size: 896KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ