0226a187a10878dfd11d43df0a88715f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0226a187a10878dfd11d43df0a88715f_JaffaCakes118
Size

8KB
MD5

0226a187a10878dfd11d43df0a88715f
SHA1

6e9b446f726ea72ebcb8af086d2423b5b9826715
SHA256

b41e0eb522cc8e9f6d030df231509407584f069a2637ed37c65a5fec1724f2fd
SHA512

66841f538787263b2ab173ec1b8129695dc2fbbf9385925427a85b24e6fd0d36f6a3c52e4d1f4abb8987136a0350ff7732ee435d5a04f36d4d7b2d84c7a7ac0b
SSDEEP

192:zs/OVSf0+pXORibg8MsL0ZZ06ZsuJqN5WB4S:wIYvF5MsKy6Z3q74

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0226a187a10878dfd11d43df0a88715f_JaffaCakes118

Files

0226a187a10878dfd11d43df0a88715f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

757c943b5da1634d404347e5343ee9bd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
SetLastError
LoadLibraryA
GetProcAddress

advapi32

RegOpenKeyExW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data2
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 774B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ