JaffaCakes118_5b1a0c379ccc8cab0d06cbeb1338451b | Triage

Sharing

General

Target

JaffaCakes118_5b1a0c379ccc8cab0d06cbeb1338451b
Size

95KB
MD5

5b1a0c379ccc8cab0d06cbeb1338451b
SHA1

ae615e94824e0547027768d74d03af8b23fefd4d
SHA256

2dccbfc709478a47a8c039619c5aecc11731f3fe8e3a70c26b4e6f668f190d29
SHA512

a4433852b9c404df4b8e2d68cabe0df3ff02a2c9ebda7ecc468e73d1651119bd1dc878474f3c508b8d42b8bb78c1c08d1fe5c93175f8e2b15a9765019179c581
SSDEEP

1536:MHj0v8OJ4gwubDS+8MSn/Dk7cyzrdYptjL87LU/o19Em+0rAfuILFxNSF5E8k8jw:MHo5e5im+8MIDgcEQVMLqEcmk6FFk8jw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_5b1a0c379ccc8cab0d06cbeb1338451b

Files

JaffaCakes118_5b1a0c379ccc8cab0d06cbeb1338451b
.exe windows:65535 windows x86 arch:x86

f217ca37944f9509f0667389035316bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetTimeFormatA

advapi32

RegSetValueExA
RegConnectRegistryA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegFlushKey
RegEnumKeyExA

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE