05c595ecc503937a353407b6304dd8fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05c595ecc503937a353407b6304dd8fd_JaffaCakes118
Size

120KB
MD5

05c595ecc503937a353407b6304dd8fd
SHA1

2ac7e952896c2ed8120593867cff752cfb8f7343
SHA256

b6f1fce1983af6dc90e85cfee26d01069ff2b8a88363b8443c9de4266b2f518e
SHA512

f7082070989b5f4ec466d07dcb4ce853aa656cf4093a037fe926fb00938c0b379b828421eceb22bb1e17c15127fde7c3b5321e2512f3cbf38b5e10b7bfe0d5a7
SSDEEP

1536:9LR0BoQJQWbrqbFLgyL4Wfxjv10XWINk/LJEZRQciI1st3ErwZOHgDD6t4eS+I:9L87Lbrqb7L9p10GLTJEo5J08ZOA/Ze

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05c595ecc503937a353407b6304dd8fd_JaffaCakes118

Files

05c595ecc503937a353407b6304dd8fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48e6a6ecb47824089ab19ef1085cbbfa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
VirtualProtect
VirtualAlloc
LoadLibraryA
LocalAlloc
GetCurrentThread
GetModuleHandleA

user32

BeginPaint
EndPaint
DispatchMessageA
GetMessageA
TranslateMessage

advapi32

RegOpenKeyA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ