284f68956eaa48a1eda24baa33bed9b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

284f68956eaa48a1eda24baa33bed9b7_JaffaCakes118
Size

251KB
MD5

284f68956eaa48a1eda24baa33bed9b7
SHA1

a7c2e7153749cb77ea4e0126f7986d40edace674
SHA256

45cb9f76f0cb2c9464f7508d3664d690591c1fd6538accfcf1ce017ba46e8345
SHA512

6ac93bc99e3cebbce5c96b882cfb62bdd35ed48c4a57202e9287b0295f9c114a32047e9404d344058dc4b219713e8205385a8472c2d8f6053ad184637a37ae30
SSDEEP

3072:O24vNCyrnJXQD3vqI5BAEyEMVcBM6/naNXDVe4S2jbxWGqt:O2SIyrG227yEocBnMxSbGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
284f68956eaa48a1eda24baa33bed9b7_JaffaCakes118

Files

284f68956eaa48a1eda24baa33bed9b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eef7de3059a44aabb78ca0a60c6b6351

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFileW

user32

LoadIconA
LoadCursorW

gdi32

GetStockObject

advapi32

RegOpenKeyExA

Sections

.text
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textR4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textR3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textR2
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ