f5d86ea59b3fdd4c3b9b2239b54b97bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5d86ea59b3fdd4c3b9b2239b54b97bf_JaffaCakes118
Size

254KB
MD5

f5d86ea59b3fdd4c3b9b2239b54b97bf
SHA1

8bdfb031f9c69c3a62253fc296a36cf4be242999
SHA256

3a487918f1784b85cc77c3cae460ca4f4ceec6c6257865c30dd9b31966bca1ad
SHA512

4d140e73d70020a846aa8a90c74a92640d9da3c0ebfaaea0e3f89481ad5279ff3283b1873869137a2b2ffe80252d89b3ad738ac4be1d253d39fbd395625007c4
SSDEEP

6144:FR5S2aGoOW84vazVVZC0caMEL1wM1VHKa/vR/:FRcUoOkfIhwqVfJ/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5d86ea59b3fdd4c3b9b2239b54b97bf_JaffaCakes118

Files

f5d86ea59b3fdd4c3b9b2239b54b97bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1c846d21087d31fb324836c185d419d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
CreateFileA
GetWindowsDirectoryA
VirtualAlloc

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ