4ca7ac73dfacae3c6f0db5931eff68fb_JaffaCakes118 | Triage

Sharing

General

Target

4ca7ac73dfacae3c6f0db5931eff68fb_JaffaCakes118
Size

1.0MB
MD5

4ca7ac73dfacae3c6f0db5931eff68fb
SHA1

9357405c2cbd1fdbb6198fca4e03482f020548d7
SHA256

7b3e64f9ed746455192821a9447db2deee992f054b676584922c1b86da387b33
SHA512

f194dc12da58f74ec6b621a7f783c8e9b626794028fc53aea793cc35ea3a470e01ea3c521e81eb07707d3c064c7becd6a41d4e3f7c5bcc4bbe895eea02e711f2
SSDEEP

24576:d1Er4Mgtw+dpA/nB1fgW12wYkOPo+GZ9jGOE0z7nT9mVZfERa/QY:a4O+d+/HgWo17PzGLywZmERa4Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ca7ac73dfacae3c6f0db5931eff68fb_JaffaCakes118

Files

4ca7ac73dfacae3c6f0db5931eff68fb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d2beb63943c2bf1b92483b75912a973

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
LoadResource
WriteFile
LockResource
SizeofResource
FindResourceA
Sleep
CreateFileA
GetTempPathA
GetLastError

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

user32

wsprintfA

Sections

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ