150fd8d41f49f4f3c3235d97e588320b_JaffaCakes118 | Triage

Sharing

General

Target

150fd8d41f49f4f3c3235d97e588320b_JaffaCakes118
Size

69KB
MD5

150fd8d41f49f4f3c3235d97e588320b
SHA1

31f016c5b5ba9a5aaf983c3a10beeac9a543ba65
SHA256

b77043b50d1c87c6156287899b6ea1ce65e111bd341a376fa1a87d66c7c90b62
SHA512

2974c6e6e578bc07eb17578b9872e6c654e4896ba049b041c1e17e067f16c0ac8938461baa468b5b77d66724788d3fb4bd4abc09378092ff015b68a6fb87f46e
SSDEEP

768:pY15HIMTwCiIG7xN5ZaY9R8tZeuprRke7uJsDKDy7MWJS5o6y/QudhpA:CHIMTpO5ZaoR8jeUurPDsJ5RQu7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
150fd8d41f49f4f3c3235d97e588320b_JaffaCakes118

Files

150fd8d41f49f4f3c3235d97e588320b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c41c37fe0967c42c1e66de79267c5255

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
GetProcAddress

advapi32

RegOpenKeyExW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data2
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ