54568202f85c4be73c8509aa4d6a9772_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54568202f85c4be73c8509aa4d6a9772_JaffaCakes118
Size

42KB
MD5

54568202f85c4be73c8509aa4d6a9772
SHA1

350999764fc067d56240f466eeb2501cefe0e00d
SHA256

d6a75cca0715c6a867def29b858aa048f82ff225e650c7ec83fd7d5dc54a158f
SHA512

74d0c9d6d162a060a0cac22508d26d0e3b49dd6288e2ff7b81da558891c34d0f434954b9d92aee7d995f4407fe63b42820bd553c85928c92a5ee7ed6123ca02b
SSDEEP

768:x0AKAHln+atbVNDMcfRj9ZiIrEuolARDBlfxNwVfiW3:x0ZAHxTJVFMcfpD4unRjPSfH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54568202f85c4be73c8509aa4d6a9772_JaffaCakes118

Files

54568202f85c4be73c8509aa4d6a9772_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36fb06462bbd480471c9bd23201596a2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
GetVersion
LoadLibraryA
SetFileTime
GetProcAddress
VirtualFree
WriteFile
lstrcatA
GetModuleHandleA
GetModuleFileNameA
ExitProcess
CreateFileA
VirtualAlloc
CloseHandle

user32

CreateWindowExA
RegisterClassExA

advapi32

RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE