f7a95dc22573e2370c1910e9e1cfa1ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7a95dc22573e2370c1910e9e1cfa1ae_JaffaCakes118
Size

15KB
MD5

f7a95dc22573e2370c1910e9e1cfa1ae
SHA1

96cd02fe20d277e33d167649ec816bf7c96d9490
SHA256

c18fcb2c038e7ec32bb05c385a5a4b3b232a0b4e1adff49c321a349d4bcca81f
SHA512

6a7169f60fbceaaa8c7f34873dfad6ecb5a7343d25ec0acbb404fa1cc55fcc00ac61773badbcb9aa0e8d6976e4bbb4d4f171e624a4729d363c763d6b624d4236
SSDEEP

192:SeBNfbQeETwRFHmoXViNtFcgbqKzQPkAwoEb6nVxks1ua9ccDN8:SKNfbdETLoXVrgbqKQPkAwopVNNqcD2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7a95dc22573e2370c1910e9e1cfa1ae_JaffaCakes118

Files

f7a95dc22573e2370c1910e9e1cfa1ae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

38f1d5299d5e719e20ddcb87317f737d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
GetFileTime
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
LoadLibraryA
OpenProcess
SetFileTime
ExitProcess
VirtualAllocEx
VirtualFreeEx
WideCharToMultiByte
WriteFile
WriteProcessMemory
lstrcatA
lstrcpyA
lstrlenA
DeleteFileA
CreateRemoteThread
CreateProcessA
CreateFileA
Sleep
CloseHandle

user32

FindWindowA
GetWindowThreadProcessId

advapi32

RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

ole32

StringFromCLSID
CoTaskMemFree
CoCreateGuid

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ