b65fd635497673a47efa4f432f255fd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b65fd635497673a47efa4f432f255fd3_JaffaCakes118
Size

15KB
MD5

b65fd635497673a47efa4f432f255fd3
SHA1

581163d7eefbdbd08dad2507741e1c6916104a54
SHA256

ab4974cd26e10825e7222f3042e9aa9335b13712746f5d32cafd0767106f8e14
SHA512

462ed7cb781e269ca425817dfcc16e5d35f9b6920576489c606a2a471ea565f5d9382dee90cd379e97b2d3661a30d619a75db803d20ee1b0c8bf7884d0b020d0
SSDEEP

384:g4f9+Lk/x6gNwvmhaxkjAwqKp3WKLdSKQJ:H0vgAxkcRKZWK8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b65fd635497673a47efa4f432f255fd3_JaffaCakes118

Files

b65fd635497673a47efa4f432f255fd3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5c29247fe08caa047a3ee067da370268

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

LoadIconW

advapi32

RegOpenKeyA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ