558baef2d44f7d9617069f2f19a3369c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

558baef2d44f7d9617069f2f19a3369c_JaffaCakes118
Size

254KB
MD5

558baef2d44f7d9617069f2f19a3369c
SHA1

e0f0ec5f6e50726de872d4db0b251089242e4e05
SHA256

07c7600dcdce86142b4c2e387e2f8c304732149c0cfc4dcc61f243c84e7d6b9a
SHA512

329dc39c16ba53217da2e161b43341fcde95b949acfd6a697ab68d43ec063937a40c27b824e25d4423913cf271eff78dc7360b1fdbabd0849158e8a7ea2de99d
SSDEEP

6144:KR8S2aGojW84vazVVPC0caMEL1wM1VHKa/v9:KR5Uoj+fIhwqVfl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
558baef2d44f7d9617069f2f19a3369c_JaffaCakes118

Files

558baef2d44f7d9617069f2f19a3369c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b1c846d21087d31fb324836c185d419d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
CreateFileA
GetWindowsDirectoryA
VirtualAlloc

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 246KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ