150f5ebc1a255e591280fa9ab0dd4cf8_JaffaCakes118 | Triage

Sharing

General

Target

150f5ebc1a255e591280fa9ab0dd4cf8_JaffaCakes118
Size

22KB
MD5

150f5ebc1a255e591280fa9ab0dd4cf8
SHA1

aee2ffda7b51b942144338b73063435a59822669
SHA256

2d0baa06ffedf6b466ec9076b0affff7cfb3c1bcf9a4fe2ad7270cc7e2102627
SHA512

842f0ae6883829cd3c0dfd21a0c5e9121a4369293fd75fcf1a4eebbfb033c3a05eb977ba4a7bd510467f1f27411e094fb0595732c075ca1fc802e3b9299e2cc1
SSDEEP

384:T3tc31Iy7GUUBfJ+PtK26r6sVP7G45T3SE4NHn9o59PeM94fFkVM6eiC:Rc+XTpJXc6GWVAHne5FR4f6MRiC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
150f5ebc1a255e591280fa9ab0dd4cf8_JaffaCakes118

Files

150f5ebc1a255e591280fa9ab0dd4cf8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c2022d59063a3bee3e08b0792cf5ab79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select

kernel32

DisconnectNamedPipe

user32

MapVirtualKeyExW

gdi32

ExtTextOutW

advapi32

RegCreateKeyW

shell32

ShellAboutW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE