081609a474edaa2550b0afe53e66b65a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

081609a474edaa2550b0afe53e66b65a_JaffaCakes118
Size

36KB
MD5

081609a474edaa2550b0afe53e66b65a
SHA1

a7ebcc6ef051bdee0b693f3921986e680f0d4b3e
SHA256

43045998e4bd281f477a442a827376dd7486e49d0f1b5be7aa76e2478c012d28
SHA512

ce362cc0d6dae29ae8edaf0b4f53b22ca9e3e90f6e4d16b868998c22972cac811192423f781874ca2fd1ce89f074412307d000e918b3d5bc2cde0f35705bd5e4
SSDEEP

768:GslwGVFfiRx536uukAX/s7MInl11uVZnm48vWck:GQVFfiRjqupAvs7MInZk848uc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
081609a474edaa2550b0afe53e66b65a_JaffaCakes118

Files

081609a474edaa2550b0afe53e66b65a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c8f8791da5a820e14180a26a2f30ad5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

shell32

SHGetSpecialFolderPathA

wininet

FindNextUrlCacheEntryA

shlwapi

SHDeleteValueA

user32

GetSystemMetrics

advapi32

RegSetValueExA

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

ole32

CoInitialize

oleaut32

SafeArrayCreateVector

msvcrt

strtok

Sections

.text
Size: 29KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE