2654dc17767b3a7dd06bc2994dd3585d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2654dc17767b3a7dd06bc2994dd3585d_JaffaCakes118
Size

147KB
MD5

2654dc17767b3a7dd06bc2994dd3585d
SHA1

73855eb70cc911870b8ebb80ca9d27423695c8f4
SHA256

063de5b189e22189634e011e67e0a54b5f8c166b64071c9bc3f2a712be04d283
SHA512

10c90a5d88c2ac40b67c9bb32dee305da71c4b805cb0c18ac06668f976ada0d14e3c93759105c026a94223ebddc0cc0dc53e3710e39548f122a1cae73491fb05
SSDEEP

1536:8BC6QJzp6gYkjKGuC0z9pI6AOaW6Q2X4wvxLfzzS1:8zQJzEcKGuC295AOadQcJ5Pz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2654dc17767b3a7dd06bc2994dd3585d_JaffaCakes118

Files

2654dc17767b3a7dd06bc2994dd3585d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aacd3ae6a78e924031cda1c50fb61134

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AppendMenuA
AppendMenuW

advapi32

RegEnumValueA
RegQueryValueA

kernel32

ExitProcess

Sections

.paiih
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.aano
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bloah
Size: 76KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bkpde
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ