54d244a2233d987708e1dfc2158216b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54d244a2233d987708e1dfc2158216b5_JaffaCakes118
Size

255KB
MD5

54d244a2233d987708e1dfc2158216b5
SHA1

f2f749834a0907db15e1a2c60f9cc933cf3ea00d
SHA256

f46b858ddeadae0acb38631a4dcd5ed2c9422a907fb3174ab712a5ee0a545d35
SHA512

a3d11ef52db860aa8645773394eeade6cb03aca99a44482bf98fe8751b6d32566a243dc2ccac3a829feecb1119fe91014b576b195cf859f706406b9d6ad58a0a
SSDEEP

6144:kj3upuffoKw3txbSCu3wtygECFt8hAR02:/uXS9xbSu8gECH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54d244a2233d987708e1dfc2158216b5_JaffaCakes118

Files

54d244a2233d987708e1dfc2158216b5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2178387c836e304108a315c17678f4b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegCreateKeyA
RegLoadKeyA
RegCreateKeyExA
RegCreateKeyA
RegEnumValueA
RegQueryValueW

kernel32

ExitProcess
FindClose
CopyFileExA
lstrcmpA
CreateDirectoryA
GetCPInfo
CopyFileA
OpenFile

user32

GetMenu
InsertMenuA
GetFocus
EndDialog
EndDialog

Sections

CODE
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 213KB - Virtual size: 536KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ