0ae197947debd4b3b51b3570b6d09ab0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ae197947debd4b3b51b3570b6d09ab0_JaffaCakes118
Size

388KB
MD5

0ae197947debd4b3b51b3570b6d09ab0
SHA1

49d020cbd26a5ba1b9aa5363a7346297b5cda26d
SHA256

81ce02a5bd8b262d18b506f300ba406921a649bf8ae338c3ac204306e93f8a6e
SHA512

f75e5948aae08bddef4b9d18db382310c2d9bd2c8615f11a12673228298c433a6770f5be2541ab959668965dff9c6c2bb586e608a2160c15a5878076facc4e53
SSDEEP

6144:xnigewu/xob0fhi1baqXdR+pr8uVZ3sS7YfSbGqGSbGq:xnnyuMhybDtduVZ3sMYfS8S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ae197947debd4b3b51b3570b6d09ab0_JaffaCakes118

Files

0ae197947debd4b3b51b3570b6d09ab0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4ccd8fd3ea9aafc54a63b562f4562cff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
CreateFileA
LoadLibraryA
GetProcAddress
Sleep

user32

LoadIconA
LoadCursorA

advapi32

RegOpenKeyW

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ