454aefbaa214695a514239f6e14e3b09_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

454aefbaa214695a514239f6e14e3b09_JaffaCakes118
Size

59KB
MD5

454aefbaa214695a514239f6e14e3b09
SHA1

9b0bb54bdbca60c1af14caa426d774440994853f
SHA256

6d72db23562d68903ec807000480bb3419078c5d4b63335ffff23d37e9ecccb7
SHA512

ecd345b54332f3f31aa7b857538c69388fbc3b565234cba2a6296b633e495b8d6517284b47eada62ff1a255698f6ca03b4861f7b700246a4897be58b6dd24b0e
SSDEEP

768:7ddhieaHQGC1dxON/eHk0sJo8SgiucPx9C9dYk5i/i96HwVcfkUEV+4u7AEF4Rm:ZdhGHxMOJsk0AtSgSlB/FScfrCEF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
454aefbaa214695a514239f6e14e3b09_JaffaCakes118

Files

454aefbaa214695a514239f6e14e3b09_JaffaCakes118
.exe windows:5 windows x86 arch:x86

925fce42a3b8d95259cf959bccbb4ef4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
LoadLibraryW
GetLastError
lstrcatA
CreateFileA
LoadLibraryA

advapi32

RegOpenKeyExW

Sections

.ggg3
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ggg2
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ggg
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ