12d2566eca8173d0e6ee0bf576ed140d_JaffaCakes118 | Triage

Sharing

General

Target

12d2566eca8173d0e6ee0bf576ed140d_JaffaCakes118
Size

298KB
MD5

12d2566eca8173d0e6ee0bf576ed140d
SHA1

5ff3709bd7717732b1744635991b5229464171ac
SHA256

743b782db3d90fd1e18f440b21eb8254ec8cf7a68df9871ee1977c2f5b1706c1
SHA512

a8d691c6df29eddca69ee1d8490baf3c93a1cf11a782dc9050ffea168630de0b6d623d1e2ccf6e63e309105adeb0b55ea4abae5779ec5c5df52dfb1ecd9ee823
SSDEEP

3072:/tpe7RlPXDomWqLEnCYvcvIXRTy1hmUI0xlOcw6IvS3oGcFuG9hFoHk148GzMwS2:D4RX8vDx8hzNxl86IvSiFxTO8GzM+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12d2566eca8173d0e6ee0bf576ed140d_JaffaCakes118

Files

12d2566eca8173d0e6ee0bf576ed140d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c401b959f744f1e1cb48e5faacfced2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFileA
GetModuleHandleW
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ