a691f7fdc48f1253e2fc3f5ceb690f5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a691f7fdc48f1253e2fc3f5ceb690f5f_JaffaCakes118
Size

20KB
MD5

a691f7fdc48f1253e2fc3f5ceb690f5f
SHA1

6b1de64647b357ba5953dc5c37a9d3fe480f595e
SHA256

81232bb7128a615bde53d8c2b31fa82bc73d48b16475e0f448ceac26201947e8
SHA512

34f594ff12e721b0a531518862133a9e530dc2ce08e859b9bf1532a845d7f1cf326638cb143c26f801ba39b35d98e294176776f49fb7df9e05fc41e22182a213
SSDEEP

384:DkHD6MMEj5R3QBSmOg1eP6i3MHsaCSbEBa87vvxlLOWnkcW:DbS/M/v2qsaCh7DU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a691f7fdc48f1253e2fc3f5ceb690f5f_JaffaCakes118

Files

a691f7fdc48f1253e2fc3f5ceb690f5f_JaffaCakes118
.exe windows:6 windows x86 arch:x86

c2c51702cedb9470382a0ee271ce6be9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetModuleHandleA
GetProcAddress

advapi32

RegCloseKey

user32

LoadIconW

msvcrt

exit

shell32

ExtractIconW

ole32

CoInitialize

comctl32

InitCommonControlsEx

Sections

.MPRESS1
Size: 14KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE