0dc87e65ad3916b6cbdd6c67f66ffd91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0dc87e65ad3916b6cbdd6c67f66ffd91_JaffaCakes118
Size

23KB
MD5

0dc87e65ad3916b6cbdd6c67f66ffd91
SHA1

465a1729f253ae9b2b95f8d003fe75fd9db2fd5c
SHA256

0fabf151dd34492ec2b615995541151976e67e98fff6f1ca05c85ff96e59adc9
SHA512

51906de60de5814e4971c2154dc7779cbccf409be58d9aa5b7284c4ffdd87ebeb6c75fc521ea9f0a280962b53c36b7362196e4915cf71d0243a4013b2292679c
SSDEEP

384:bMifYl0hbe9A02t+kuKAAnx51t1BrMnuVHf2WE+740ap0n:b/fMvB2tRT71tfOc+W40T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dc87e65ad3916b6cbdd6c67f66ffd91_JaffaCakes118

Files

0dc87e65ad3916b6cbdd6c67f66ffd91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2100afbf18bc85e7c45d911a8cdb47f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dhcpsapi

DhcpDsInit

kernel32

VirtualAlloc

msvcrt

_except_handler3

ws2_32

WSAGetLastError

ntdll

NtCreateKey

Sections

.textbss
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE