5fb6ba9ba63ee36c0703a8456c22c78d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fb6ba9ba63ee36c0703a8456c22c78d_JaffaCakes118
Size

23KB
MD5

5fb6ba9ba63ee36c0703a8456c22c78d
SHA1

610a4879d3fde7ade93179b783e1a08185ccec07
SHA256

18da067890aa55ae06052d94db8916995a269321f70d8742467d24a2580eca23
SHA512

306a7b08e5db8a66188864f28bc6ec44dd91c5477b6c5e9d75a293d6e52c79827c9939d9f01d6543e2ecc2a1f55819dc18198e1a2c9edc60020815b4dafefcf7
SSDEEP

384:1k6DtZzsHLdRMAPJA/25mrJ0vS7dEsbT7AkpBay5bFUqLEW+:1nZ8MIJjmecdEo1oy5bFUqd+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fb6ba9ba63ee36c0703a8456c22c78d_JaffaCakes118

Files

5fb6ba9ba63ee36c0703a8456c22c78d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3c54883e78e2f693504207067736093

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

msvcrt

_except_handler3

ws2_32

WSAGetLastError

dhcpsapi

DhcpDsInit

ntdll

NtCreateKey

Sections

.textbss
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE