083f99d65d8d00b1ca0540cc7b3c6259_JaffaCakes118 | Triage

Sharing

General

Target

083f99d65d8d00b1ca0540cc7b3c6259_JaffaCakes118
Size

16KB
MD5

083f99d65d8d00b1ca0540cc7b3c6259
SHA1

f2cc66df8dc7a83cfc215dadd71784fd3a940689
SHA256

a823142c9fcff3ab51b47ded12cc05f2bc31e4d0e2059c7e26e10691f3e7dc30
SHA512

a0279d46efde83206f7dd1e8ed658de945b083ee53c5470bfec8871810f9e4705b06b7ce2d3646f2898b20ec36518a640e01c2d350beb6746d65d5a470c21cee
SSDEEP

192:5M6bR5pagLwX4vfQtAxdH0dHRdHwdHPH1SdHK18G+jgP:5M6bfpagLwI3QtAxqrmuw+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
083f99d65d8d00b1ca0540cc7b3c6259_JaffaCakes118

Files

083f99d65d8d00b1ca0540cc7b3c6259_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05ce55a96efb5b4f1eddcc1daab9679a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
OpenMutexA
Sleep
GetLastError
ExitProcess
CreateMutexA
OpenFile
CopyFileA
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE