efec80ccb6e3a74eec4594051d32754c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efec80ccb6e3a74eec4594051d32754c_JaffaCakes118
Size

619KB
MD5

efec80ccb6e3a74eec4594051d32754c
SHA1

281bf0589f4b934ecfbdcd2ab0ac9e2713a71b9c
SHA256

d8023eb735a98ff4de7a9563a1bc0f286d86c498a347a505a5be18d3d9fbd2c4
SHA512

a87d52207d1217920e09cc64c418046ade5c4c7028be048271863994defb9e8ce2f54598f1734f03765989a718696871ae1218680c2ab9886c421f9164824352
SSDEEP

12288:NPkdQzy3/JEjjBUYdTjFWOzCW1Fad2vFBHGwhFAxsG:NPkddBejfdTFzqd2v6CAxz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efec80ccb6e3a74eec4594051d32754c_JaffaCakes118

Files

efec80ccb6e3a74eec4594051d32754c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4f4c45e15e0c469158548704bbc0adf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey

kernel32

GetCommandLineA
GetProcAddress
lstrlenA
ExitProcess
GetModuleHandleA

user32

GetDesktopWindow
ShowWindow

comctl32

InitCommonControlsEx
InitCommonControls

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ