e93f4615ac6f99128f73e72624059f71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e93f4615ac6f99128f73e72624059f71_JaffaCakes118
Size

19KB
MD5

e93f4615ac6f99128f73e72624059f71
SHA1

f17ddf8ea47c464e64b0429d2773a806ddcba7ef
SHA256

5ddf59589597ce7649288f5e45b2c385f87980813d3b98dd211df9bf40d59747
SHA512

08b648767294e8d3abd02025cc91ccd4fc50025118bf66ba60625137fdd94a335ed834ace89f40fb644cc494101e13d26646e17d92f2bf3e405cd6f7c404f97a
SSDEEP

384:08bORogegUIC8NhaA36fdHx177wJnH9B9HOWCNmsj0PVoQ0itNm:0AvgUICokpfJHSB9HhCNmsj0P2Qk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e93f4615ac6f99128f73e72624059f71_JaffaCakes118

Files

e93f4615ac6f99128f73e72624059f71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6785969b4784e4c84bca5dc94af9d926

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcess
GetEnvironmentVariableA
GetFileTime
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
FindResourceA
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
MoveFileExA
OpenFile
SetFileTime
SizeofResource
WriteFile
ExitProcess
CreateFileA
GetVersionExA
CloseHandle

user32

wsprintfA
MessageBoxA

advapi32

RegCloseKey
RegDeleteKeyA
RegCreateKeyExA

msvcrt

_wfopen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ