10cd33970ef81070d51ea486319087b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10cd33970ef81070d51ea486319087b0_JaffaCakes118
Size

246KB
MD5

10cd33970ef81070d51ea486319087b0
SHA1

dcc32cca980925eda4a9fa878f1a8a4948a675bd
SHA256

c2a1bf7190958dc60938dc8cba96b9ba359c7270828bcc9c7ebe2f352398ae4d
SHA512

8b475e1a6c8b82e66a718b173c86654a70a514f0b46185559c7ad3d0088a378a9f4e37aeb2d5d5b51647c41332e0f3cd624a67ee9daeac58d1d450af8965cbe8
SSDEEP

6144:eMp4T5T6CNnKgEWVKwV5y68ulX8AS8ewzXQm:eQ4YOK2Mo5sulX8457X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10cd33970ef81070d51ea486319087b0_JaffaCakes118

Files

10cd33970ef81070d51ea486319087b0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3391024d27d801b58b270449bd4b8c2c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetStartupInfoW
VirtualAllocEx

user32

LoadIconW
LoadIconA

gdi32

RealizePalette
SelectPalette
GetStockObject

advapi32

RegOpenKeyW

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 406B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ