3a142980655c47322302f7da7d145e50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a142980655c47322302f7da7d145e50_JaffaCakes118
Size

753KB
MD5

3a142980655c47322302f7da7d145e50
SHA1

155819a86c90cf3fe1b5f288921faac1d3dd4d04
SHA256

a9ef11b4cafdbf44011212cca7b51f129f3f2a0a58d3d286e08c949d273d957b
SHA512

8816fc2741d430ce02d14ab4235f2a234903c8eb618270c0cae6bfa51c0343bb7a0de45d59d4079b474a1bf6a6519337fccb358938cc6a319be744413ef18e1f
SSDEEP

6144:40r5MDI1XJ7lDzDhxdEo/4/KedOmuN+u2e8XmKKXkAh0RCArVrpivUpB6y+L/jls:d59hGo/MKiruNNRmmZt08AbivURw54

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a142980655c47322302f7da7d145e50_JaffaCakes118

Files

3a142980655c47322302f7da7d145e50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38b70625d3fc577a2395ccb21b397d32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
VirtualAlloc
GetModuleHandleA
lstrlenA

user32

LoadCursorA
GetSysColor

advapi32

RegQueryValueExA
RegOpenKeyExW

Sections

.text
Size: 633KB - Virtual size: 633KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.zzz0
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ