ab19a5f491f3fa3ed17a146b19193926_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab19a5f491f3fa3ed17a146b19193926_JaffaCakes118
Size

16KB
MD5

ab19a5f491f3fa3ed17a146b19193926
SHA1

3974d3b8b16d0efb6ef403b97c402c0d58261885
SHA256

20ad4b0d5dffb70b8af7f916d13f38451ef240ca1a96c648b039517902a0c2fb
SHA512

6cc3ccc67bd9858b380b9dd82e6745a311090e2b31c92a35ed7c1a2a2b93724aed940d13858fcafb85b8f42fc09390edd6706ba3932d4629326ba47ec1da34b4
SSDEEP

384:Mt4Lcg/abxFLnUkLF5DZb8mo7wGZipCtp:Mt1PbnUkLvZb89g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab19a5f491f3fa3ed17a146b19193926_JaffaCakes118

Files

ab19a5f491f3fa3ed17a146b19193926_JaffaCakes118
.exe windows:5 windows x86 arch:x86

130819b265d35e86ec8e1621641c17cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

advapi32

RegOpenKeyA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ