11f6b240e7882b968b5e820ac254b2a2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f6b240e7882b968b5e820ac254b2a2_JaffaCakes118
Size

95KB
MD5

11f6b240e7882b968b5e820ac254b2a2
SHA1

aab2865fab4535f0c59916f5b62fbbcfde37475f
SHA256

02c1eead3626445a006e32b33d4d8ceab2a6950b3a65c7c03235212d197842ff
SHA512

9bb0b0abd90ed3d17bda98acca5a5781f60bc99d921b36a85caae4495e13c899365352c65a746d1d5792d8fbaae3e654800a6837a2cd819e6733ea728f50f4e0
SSDEEP

1536:J3fdLeg1iKuUDoSFGEhOg+e5eYwJj1mdvQAwal:1fdLzkf0oSZkJj1mpBd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f6b240e7882b968b5e820ac254b2a2_JaffaCakes118

Files

11f6b240e7882b968b5e820ac254b2a2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3369b4fa8b8946105d2bc929dad247a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
lstrlenA
LoadLibraryA
GetCommandLineW

user32

CreateWindowExW
LoadIconA
CharLowerW

advapi32

RegOpenKeyExA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ