e3172834b20898b8a25184c3bd0948ed_JaffaCakes118 | Triage

Sharing

General

Target

e3172834b20898b8a25184c3bd0948ed_JaffaCakes118
Size

93KB
MD5

e3172834b20898b8a25184c3bd0948ed
SHA1

a86227c1630d54dfe059e9a71df1299c1566a146
SHA256

78da25e1780ea1efc42205ff601cd73dee0075ab4f3c58c59387cce8719c46dd
SHA512

f31077dde00e8924aa3f53125eb0a884a5c35251b41c5c38d1b27ba64bc4b99cc41d953eacf62db11cac8950273698538d4ac570633a784ebc2a17cbbacf9a82
SSDEEP

1536:luZQ4OaD0uIwaq7M4KoQuURcKc2sXTc3+yA7TNeNQ5BAkdlFKT17s:Q967wf7M4KoQukcRXTaH8TNv0kZKTBs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e3172834b20898b8a25184c3bd0948ed_JaffaCakes118

Files

e3172834b20898b8a25184c3bd0948ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48ae0cc262861eba4723cad29506eab3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ