JaffaCakes118_499d47a6db5e7059044d99afc2b8997c | Triage

Sharing

General

Target

JaffaCakes118_499d47a6db5e7059044d99afc2b8997c
Size

94KB
MD5

499d47a6db5e7059044d99afc2b8997c
SHA1

40992ae2b7bceec3c6ad9379ae93b6244c52e388
SHA256

407e53f9a63c7260eb914d9b5e723b085e2aa799aa5070c0f45071ba95656a58
SHA512

75b6e5130fccfb470e98dd435639b82d09a938937ff02f111a57c1867a5b2594f4af4405649bb4d87cf339df3e57784d7ac0c1732ff97f7a44b8d22f92e85955
SSDEEP

1536:hLFnsF48/2y1Cwl7RkZlOaTChekXzuaSIjEX9FVKD1cKAT83/5aeEeRWB9TWSc:Hy3/2y1HVRkGamhLK9X9fKpcKAT83RaK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_499d47a6db5e7059044d99afc2b8997c

Files

JaffaCakes118_499d47a6db5e7059044d99afc2b8997c
.exe windows:4 windows x86 arch:x86

a7eaac069d48c38b338a6083f98f67de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryW
CreateFileA
GetWindowsDirectoryA
lstrlenA
lstrcpyA

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ