f50af39abda4e806be593490c2551419_JaffaCakes118 | Triage

Sharing

General

Target

f50af39abda4e806be593490c2551419_JaffaCakes118
Size

38KB
MD5

f50af39abda4e806be593490c2551419
SHA1

fffe548b575dfbbb2205383c4937a99d6d0035df
SHA256

b1e9c422863ee024d463cfe20b56b0f552f078e7da47b9ec15f29d018565228e
SHA512

96be344e788dde96be700e7b8eeb01a4d8c6686379f3134a5a83ee26de0ed22ece8a8e37ca10973d35574730ef123451c68107e2aea717b82d999253b457b51e
SSDEEP

768:yCAmdkQhC8prhRsIRHpM8riCUZKJOn/mEnJyoCh:yCAmJnNRsIhpM8wJn/Lyxh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f50af39abda4e806be593490c2551419_JaffaCakes118

Files

f50af39abda4e806be593490c2551419_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d45a2db2797a73556dda33f903e00e06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualFree
GetLastError
ExitProcess
VirtualAlloc
GetVersion
CloseHandle

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE