e1f2e25de9804a6716d9044b11f921c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1f2e25de9804a6716d9044b11f921c3_JaffaCakes118
Size

149KB
MD5

e1f2e25de9804a6716d9044b11f921c3
SHA1

d0723d5916278a8dae336c748cbcca70f0d3a6e3
SHA256

282db3eab1b1c6ce134ebe942e33a4a704a69797e256719bd337c416297919b0
SHA512

fe1f15f2a273b5cad66f8d9d149b99fd64a87aec8e4d0eac943d08f50eb1e5b7939a5243fb7d11c2fa5bdfc20cf690cfcf3603221964f72b0e1cef33cc116a47
SSDEEP

3072:VjRZyvXTG/o2xcOA4OQFKc1t/u8E4bpxJtEiTlmrt0Qb3:VjRZyvjG/ojOA4OQYwtDXRmXb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1f2e25de9804a6716d9044b11f921c3_JaffaCakes118

Files

e1f2e25de9804a6716d9044b11f921c3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

b899c73f24bfd030c7347246348dc851

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegDeleteValueA
RegSetValueExA

ntdll

strstr
wcsstr

kernel32

lstrcpyW
VirtualAlloc
lstrcatA
lstrcpyA

ole32

CoCreateGuid

user32

CharLowerW

Sections

.data
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 466B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE