6f0b3f597edfb991b1f3b36fdf345eb8_JaffaCakes118 | Triage

Sharing

General

Target

6f0b3f597edfb991b1f3b36fdf345eb8_JaffaCakes118
Size

23KB
MD5

6f0b3f597edfb991b1f3b36fdf345eb8
SHA1

15bae7124d45930ff57fe416a25d4ef0f3d75abd
SHA256

e97f6868c30929ae3681f8ee79db5e8eb99281f5b5dbd8f7ee66faadbdd96757
SHA512

d0d1603293376bdae16ae1b700665a0792f6be6d4b5bcc2490bf564dcbc6003f41e277eca2ea1b6a4bc52b226d8e1e7b21853ecc6da5002b069e90381ac9b37a
SSDEEP

384:HennLJrzyVMsdPLZj/G2mwv4YHFWwQA7Y0g:ItrzyVZ7y2hv4wF8b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f0b3f597edfb991b1f3b36fdf345eb8_JaffaCakes118

Files

6f0b3f597edfb991b1f3b36fdf345eb8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

94c984121a90091582fab3aecfff1efa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
VirtualAlloc
GetProcAddress
VirtualFree
HeapAlloc
MapViewOfFileEx
LoadLibraryA
CreateFileMappingA
GetCommandLineA
GetModuleHandleA
UnmapViewOfFile
CreateFileA

user32

DialogBoxParamA
LoadIconA
LoadCursorA

advapi32

RegOpenKeyA

comctl32

ord17

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ