dfc4710fcc2abb5e978901c72a0f15a4_JaffaCakes118 | Triage

Sharing

General

Target

dfc4710fcc2abb5e978901c72a0f15a4_JaffaCakes118
Size

84KB
MD5

dfc4710fcc2abb5e978901c72a0f15a4
SHA1

d04d7b6f2eb46ce95a7e5d4c65a005a30acf3432
SHA256

d5a2c85035ef9660a056ebb794cfa33811c522802817830e592a8890b5709e57
SHA512

e2342efb60f33505505896c381e791308eb04d743b04429c923a960be1f53a2ce8f420d38836c65abeed9efb67b17a6fa1612f53ed8c0d99347ee9b089e3a9ff
SSDEEP

1536:xDglyOjYmQ6tNDbe1coJ7DVLRSQQCA0YFiYozUByy:x0eOt1ydXDQt7N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfc4710fcc2abb5e978901c72a0f15a4_JaffaCakes118

Files

dfc4710fcc2abb5e978901c72a0f15a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7cf41320a2390bf327d05be0bf8c7d89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

CreateProcessA
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
lstrcatA
GetCommandLineA
ExitProcess
lstrcpynA
lstrlenA
lstrcpyA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteA

Sections

.text
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ