e85fa151f8155cff9af58a507fafc3b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e85fa151f8155cff9af58a507fafc3b8_JaffaCakes118
Size

11KB
MD5

e85fa151f8155cff9af58a507fafc3b8
SHA1

3cf0677af8b459223042c77afdb4a2ab39040793
SHA256

813d91b90a829dfa062f4ca593d99f24dedc399abfc3d0938b2dc34028310284
SHA512

41d849c70c69d0998cd7677247cfbaa17f342109ffb748a9e4c9e3b4729b6d3e4bb4554ba733666f7916227d0dfd1c52f7cc0fa09afb738e30e899efe51ef538
SSDEEP

192:Yx03HCGX30ivYkNcDggV0DyWEns/6P8xOobcoRz+p39:eGtv9NcDgi0Dy1nf8xFbRRapN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e85fa151f8155cff9af58a507fafc3b8_JaffaCakes118

Files

e85fa151f8155cff9af58a507fafc3b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

021ec9eb52154144d7a72aed9a4bcaf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

shlwapi

StrStrIA

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetTickCount
lstrlenA
LoadLibraryA
lstrcatA
lstrcpyA
GetVersion

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

urlmon

IsValidURL

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE