0731bcd99bd99a0effbfe75a4aeaf69b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0731bcd99bd99a0effbfe75a4aeaf69b_JaffaCakes118
Size

2.0MB
MD5

0731bcd99bd99a0effbfe75a4aeaf69b
SHA1

64ee5562e1aa9ce089134843f510f9b7a17f6149
SHA256

8ef0c3670e0faa23a88aa50fce4505e7f66b873edc3a8967f340e614179945aa
SHA512

0bada6d05cae6ce1a46bfd8aad0b7a2f28a01d832468c15f33114a9a5a5354e6a43525d06339e7179573027b67c874daf26aa518539bf845ea04d6d431158cdb
SSDEEP

49152:U6foqAOxHB7v0x0nNsKcmJZ0bn5LyO6PYocQgJBr3Wc:RfVcx+rXOwlAggB1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0731bcd99bd99a0effbfe75a4aeaf69b_JaffaCakes118

Files

0731bcd99bd99a0effbfe75a4aeaf69b_JaffaCakes118
.exe windows:6 windows x86 arch:x86

cc5e0c3151a5029165035c482544db47

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
GetModuleHandleA

user32

CreateWindowExA

advapi32

RegOpenKeyA

Sections

.text
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE