b74e5ffa7d32c0d165ce84c2427dcdf1_JaffaCakes118 | Triage

Sharing

General

Target

b74e5ffa7d32c0d165ce84c2427dcdf1_JaffaCakes118
Size

19KB
MD5

b74e5ffa7d32c0d165ce84c2427dcdf1
SHA1

d67b7fbcc59f16766841254e1d7e24c75ab3a04d
SHA256

b1ac3bf11fab1975a62bd6d5edc10fc254d3dae4f68cdc4016ee38b38d40d395
SHA512

0dbf75e16c303705a48e7bfeea1b60da044f226bf2f56bd07c9611b5b6ef46e3d388b5e89ed269f23ecda8e3d5a2bd46912b8d70c03a0bb5a65812fd0bababfe
SSDEEP

384:bUozolaO/KYyBRzN/5G9wpL8lChFipIp:bUo4YzVk9wIf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b74e5ffa7d32c0d165ce84c2427dcdf1_JaffaCakes118

Files

b74e5ffa7d32c0d165ce84c2427dcdf1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3df0b35fe23d71169c9c5acf68e5274d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent

user32

MessageBoxW

advapi32

RegOpenKeyExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data2
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ