09551d60fc64fef4a4c20944b0adac91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09551d60fc64fef4a4c20944b0adac91_JaffaCakes118
Size

129KB
MD5

09551d60fc64fef4a4c20944b0adac91
SHA1

7fdf5428c6e66f203b0837b5f92d18520b242d6f
SHA256

229660984017372cfc7f54a12cc5fbadab6f0eba2b03aae9c88883588b661421
SHA512

07bb7ba1e9f6512f552a53d992db1af68859ebab2ec653e67b68c5c9d0e921b14254e5c24da8f5ed0ad3204ba77a41998dd57607ca40963bdc59927a3d02066e
SSDEEP

3072:KXK606jQq/7X21nmVHsm7aaaaaaiT4Q7swMzybgA:KXKV6jQq/7X21NT4nhA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09551d60fc64fef4a4c20944b0adac91_JaffaCakes118

Files

09551d60fc64fef4a4c20944b0adac91_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a43a691caf4b1b5a573e005ec313b366

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
VirtualAlloc
GetWindowsDirectoryW
GetCommandLineA
lstrcatW
CloseHandle

gdi32

GetStockObject

advapi32

RegOpenKeyExW

msvcrt

memcpy

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ