283276bffb355a341704851434766211_JaffaCakes118[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

283276bffb355a341704851434766211_JaffaCakes118.exe
Size

27KB
MD5

283276bffb355a341704851434766211
SHA1

e10cfa84814564a7d68c0b61d67b316366d358d1
SHA256

77817e1c2b6ec121818295e49171c6758eaf033abb775089445791351a1d3431
SHA512

2677d0821fd464ff230a77bc7071fde94abf9225f1b2da518d93cabcbae9819471048cd4f8379fbe18864bbcab10395de25f985492dbf596a36047f6b5d8f5c2
SSDEEP

768:7qPJtecA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdNhm:7q+cA6C1VqaqhtgVRNToV7TtRu8rM0wP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
283276bffb355a341704851434766211_JaffaCakes118.exe

Files

283276bffb355a341704851434766211_JaffaCakes118.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE