15eef604313e0e3e9d79b14d0e662b62_JaffaCakes118 | Triage

Sharing

General

Target

15eef604313e0e3e9d79b14d0e662b62_JaffaCakes118
Size

235KB
MD5

15eef604313e0e3e9d79b14d0e662b62
SHA1

3a7e208bed22446c3cf351fa630a740bc8eaf63b
SHA256

349f93550a061292b1f930af7eb15301091da150bcaf34a781acf3c39febf8ac
SHA512

1e1d4cef324de6814489d1b26aba18a76787ab237ac9f5d9d29b1f398f577d3a7f6c9d768cbc84b6575551df318ce97c963ba39ffa9af5fe33c5641f1ce2d335
SSDEEP

6144:govFwM12NoLHwr/3Cl0lAmoamFdhyHJf:giFENoLE6lhmGXYJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15eef604313e0e3e9d79b14d0e662b62_JaffaCakes118

Files

15eef604313e0e3e9d79b14d0e662b62_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f218b758604a3e33dd771915369aa461

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetDriveTypeA

user32

LoadIconW
LoadIconA

advapi32

RegOpenKeyExA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text4
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ