96d0f17535476b74628efce691a4aca6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96d0f17535476b74628efce691a4aca6_JaffaCakes118
Size

29KB
MD5

96d0f17535476b74628efce691a4aca6
SHA1

509a1e9a496befd49a8f6ff60002aeca1e94a980
SHA256

7e714605e021d7b49671c026d85dac540455d6adccb15f1289dbb762dc3dc839
SHA512

19b531b9fcecb51bad1e1fa49a79bb4b0931f50bfc2762aaa6b5e0951630dea2efe861be476ff110dfebd33d40198f1861d371c07d4322269749167c0ec57cdb
SSDEEP

768:frEAAu6kqEssssssssssssssssssssssssssssssssssassl20ZscUbwWd4+suSb:frrQk02ddXs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96d0f17535476b74628efce691a4aca6_JaffaCakes118

Files

96d0f17535476b74628efce691a4aca6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22d76ef44aeca1e2c98394aafe104592

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
ExitProcess
LoadLibraryA
GetProcAddress

advapi32

AddUsersToEncryptedFile

shlwapi

StrStrA
StrStrIA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 31B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ