fd51c698870ab4d368e530593c0f98d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd51c698870ab4d368e530593c0f98d7_JaffaCakes118
Size

38KB
MD5

fd51c698870ab4d368e530593c0f98d7
SHA1

478a865012895885c8c29e372dea9c918fddc379
SHA256

5cc15e7d1d64524ad9c734f1f365afb863b5d3e004c5243337902c6bfd9bcb93
SHA512

953f2893a317164f276a3901e887aa8fff74f8426884cbcaced17ed9967c8d30203ce4aae696612ca3f0ea53b1cd3dd982ba275ab493fdbd331263ebe0eef16d
SSDEEP

768:1TkJ9N28niwyVHEkwSVt643/yVbGqDwAZGUWaT4i+Sjlub+z4Vy:WJ9NhniwycUUf0AZGUWaT4i78iz4U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd51c698870ab4d368e530593c0f98d7_JaffaCakes118

Files

fd51c698870ab4d368e530593c0f98d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdb039c6a258daf06049a6553ec80b03

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetTickCount
GetLastError
VirtualAlloc
VirtualFree
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 418B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE