6248760f591e2bd56a9153a3d70dbea1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6248760f591e2bd56a9153a3d70dbea1_JaffaCakes118
Size

58KB
MD5

6248760f591e2bd56a9153a3d70dbea1
SHA1

80ec7d6932e38f00db509e27a83166ac29cb27b2
SHA256

dc4d7a91317a22e100ccebe3ac0a62750f827aa767fbcc03723dbec60b7327a2
SHA512

cf11fc759aedaef52692f3ac0091cf8da4720c4f4b55b196e1159f44d834195a47a40116b6075a84b31477951d923dd9a9ec70149f38416e7f0cdd59f433f144
SSDEEP

1536:IHaq2gwiwt1XJRtZAznI4LhuC4lLpdzzFjo:IHaq2F31v6I4L09lVj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6248760f591e2bd56a9153a3d70dbea1_JaffaCakes118

Files

6248760f591e2bd56a9153a3d70dbea1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e278c9484564127e7bcf7dd9ca8e40bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc

advapi32

RegOpenKeyA

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ