dca7e8a2b1c0e793f3ab918269245c3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dca7e8a2b1c0e793f3ab918269245c3a_JaffaCakes118
Size

15KB
MD5

dca7e8a2b1c0e793f3ab918269245c3a
SHA1

5071f6653a4706a3bd030ae62666f13a09b5b249
SHA256

216fe591a96555dc1e87722cea1663882f913aa5dd2886d5bd0aec40f73b27eb
SHA512

c0a432e5ebc8487cd336c011aaf3721cd6a26015c909bef6bce7ed879ba2d7879998bff1440e744ddf4510221263be8719b5fe7f9f4ae57c9b44642809c31f07
SSDEEP

192:b5povgObnloo66tEKlk8ANs0t8BYTCd5sGHCFIlGqg1EI/:lpMBnp6Ol2t+ldq4sKQJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dca7e8a2b1c0e793f3ab918269245c3a_JaffaCakes118

Files

dca7e8a2b1c0e793f3ab918269245c3a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f7d089426724f41eb5965ac1d682b3a2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

LoadIconA

advapi32

RegOpenKeyA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ