df64c31959431465fd2f7a328a2a99b5_JaffaCakes118 | Triage

Sharing

General

Target

df64c31959431465fd2f7a328a2a99b5_JaffaCakes118
Size

22KB
MD5

df64c31959431465fd2f7a328a2a99b5
SHA1

666e82a62ce60785ffb4499d14a400291e0adbb3
SHA256

0c865fa1104b6369c2d424f527150ad8df8a3f80518b343f6d1a1b3b27bc9507
SHA512

60e08b8d5d3408e8d19819b2af52d0adf5d879b4d4ed83167cd5874410f87f237dbe98b81f64a133eba7ae5ec4258b1a241b69562546667ccdbfa929367e1ed9
SSDEEP

384:ownHvqxuzy2mt4WM/CatNBNRahB8Cug/y3TuwRReaZe3N3btnkyyI7P0ExPm2Z:KuquWidflPIy3TuwDBQpyI7XJZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
df64c31959431465fd2f7a328a2a99b5_JaffaCakes118

Files

df64c31959431465fd2f7a328a2a99b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bb9328695206f602224cac41ddfd9a57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select

kernel32

CreateEventW

user32

MapVirtualKeyExW

gdi32

ExtTextOutW

advapi32

RegCreateKeyW

shell32

ShellAboutW

Sections

.text
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE