d5b7c4a362e9a02bcaa4ad2a65fbf67c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5b7c4a362e9a02bcaa4ad2a65fbf67c_JaffaCakes118
Size

24KB
MD5

d5b7c4a362e9a02bcaa4ad2a65fbf67c
SHA1

04f9bea98c2006e8718e6be31348fd51df1cb3ef
SHA256

5f049b5f41699da7b45fb6e274643857558b59d2c5d72f195a9d2b820cb1df53
SHA512

9ebd019ad7c49bbe14df25c6caece72e304f54beda88438fa9240ed461eba121a97efbfd3d1d2972e68c49aba3ba184b46a8615f3d1687e625b4331268300ca4
SSDEEP

384:PBDhaVAlFG/DYY6aMuDtddbfkt+Fsq1V1JAfu26u4zXXy79CzE:PBDhiCFU56eDLFf49Q1JK/fgHQCzE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5b7c4a362e9a02bcaa4ad2a65fbf67c_JaffaCakes118

Files

d5b7c4a362e9a02bcaa4ad2a65fbf67c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46c6a4d2cbbc7b75f9d5a5371762b344

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select

netapi32

DsGetDcOpenW

kernel32

ResetWriteWatch

user32

MapVirtualKeyExW

gdi32

ExtTextOutW

advapi32

RegCreateKeyW

shell32

ShellAboutW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ