139e9a94234891656c1dbbebe1ee981b_JaffaCakes118 | Triage

Sharing

General

Target

139e9a94234891656c1dbbebe1ee981b_JaffaCakes118
Size

68KB
MD5

139e9a94234891656c1dbbebe1ee981b
SHA1

efaf819f9293480b9083a3a7a39ef74c2f73e3be
SHA256

cf1a099fd2e533b225e49d55c45b9276517acd22dd41a56edeb9f2742d298e38
SHA512

929fa0267dc49bfee8764f5f30a000cbd2373e715c9be88bdf0a0c6c8bd33658464f226126cc9565af881b4134d84d8d407005a03949239addfc6e497abda2a5
SSDEEP

1536:k9gswK6mz5xayrETcKa/KGrJWrQpI4OJq3BMVNf+XZWjxg:kPwpmnhrfxSFQeRJq3yVNf+pWdg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
139e9a94234891656c1dbbebe1ee981b_JaffaCakes118

Files

139e9a94234891656c1dbbebe1ee981b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

28da4fa894f84c746e629e6c56db4f35

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsFree
GetVersion
ExitThread
ExitProcess

advapi32

RegOpenKeyExA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1022B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ