dbb1b67c2d79e70e08ccbaf667606077_JaffaCakes118 | Triage

Sharing

General

Target

dbb1b67c2d79e70e08ccbaf667606077_JaffaCakes118
Size

104KB
MD5

dbb1b67c2d79e70e08ccbaf667606077
SHA1

888e014169489e8c013dd09df267ee68ec828960
SHA256

aea16cc2741988429178149ffc8d391fface295e88278327f08b0392fb5b875c
SHA512

be54e3a131c1bc32dd7a27c4de9ef44259291384946978525c8f29647d06141aa60d57e567bca54a2d54e7b4e2ee63acda4f9f4919f891cec428febd489e54ad
SSDEEP

1536:dit/UJNoLHLoOTcQpjTGZTg57qCe9oodOOHEr42aeEKIg4:IYC/oQp/GZ87GyodDHEr428Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbb1b67c2d79e70e08ccbaf667606077_JaffaCakes118

Files

dbb1b67c2d79e70e08ccbaf667606077_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1e63e5d518c81934713656fb7d6cac6a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA

user32

LoadIconA

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ