0f2438388f0a5eb08c25588d596b0bd2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f2438388f0a5eb08c25588d596b0bd2_JaffaCakes118
Size

36KB
MD5

0f2438388f0a5eb08c25588d596b0bd2
SHA1

205024f9ed1186d00073d43d4d7cace33c274ff3
SHA256

e4661c325cb1430dbb5737e050334e4c714ec81d37e320876d6c9025906afc12
SHA512

3f84f6009430406454085be4793c6f553e0623210f5228f308f6a5a796a5400f97f19e93db7902cfedc5735c0656a1f4c2ac5f6c4dc5b9842be56b899404b139
SSDEEP

768:9lSEYGUF93cOtwplKIer7iCt7b78jDaEFzhHV9jWa2TT2OZdPDldA2z:9lSvPn3cZPKIoiCt7f8iW7Ua2TT2OZdJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f2438388f0a5eb08c25588d596b0bd2_JaffaCakes118

Files

0f2438388f0a5eb08c25588d596b0bd2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dbda323535748a93bd25585a25cda8b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
LoadLibraryA
GetProcAddress
VirtualFree
lstrcatA
GetLastError
ExitProcess
VirtualAlloc
CloseHandle

user32

EnumChildWindows

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE