09c34701a97f7e95b6c7be58ec4aa005_JaffaCakes118 | Triage

Sharing

General

Target

09c34701a97f7e95b6c7be58ec4aa005_JaffaCakes118
Size

16KB
MD5

09c34701a97f7e95b6c7be58ec4aa005
SHA1

a423f015bdcce59273af20e48fb4aa26a8210b54
SHA256

cc25003362b799a1844b8c0c852e9fecf7dfc97feb4a0ca9a5e95040d8110344
SHA512

241280f6125edbe345c1e6c92ff989b778e95de7b62bbb22a8217f1eaaac1b809e26f29e7872509f0e9827f62614c6dd3f4335cb8a177d983d462f9c28a9a75a
SSDEEP

384:FPgyBt/fw2J89IWKl19hhU1b05Xe4WCKUevZAtJFVaoYkE:27c8CVhhmbmXe7CKnvurgkE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09c34701a97f7e95b6c7be58ec4aa005_JaffaCakes118

Files

09c34701a97f7e95b6c7be58ec4aa005_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa121b1a5d7e963fdb5f0efdc0787440

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
lstrlenW
MultiByteToWideChar
lstrcatA
GetFileAttributesA
GlobalFree
CreateFileW
ReadFile
GlobalAlloc
GetFileSize
FindClose
lstrcpyA
FindFirstFileA
Sleep
GetLastError
GetSystemTime
ExitProcess
ReleaseMutex
CreateMutexA
SetErrorMode
GetModuleHandleA
lstrlenA
CreateFileA
GetTickCount
CloseHandle
DeleteFileA
InterlockedExchange
FindNextFileA
GetStartupInfoA

user32

wsprintfA

advapi32

RegQueryValueExA
RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegCloseKey
RegOpenKeyA

mpr

WNetEnumResourceA
WNetOpenEnumA
WNetCloseEnum

msvcrt

tolower
memcpy
memcmp
_except_handler3
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE