0f015f73400b59cdf69c55f4aa9d0f39_JaffaCakes118 | Triage

Sharing

General

Target

0f015f73400b59cdf69c55f4aa9d0f39_JaffaCakes118
Size

176KB
MD5

0f015f73400b59cdf69c55f4aa9d0f39
SHA1

942ec853bbe9f81ec09792b721adc10c43b12863
SHA256

66f86b57120545c276e60734c8f821f8414fd69e3800caaaf0ca0dcb5f7ecb0b
SHA512

ea33f76c94074113615fec8b253c7f542b8a81387b203cc66f4cfd8b80a2f9f0a4e3e685072f25ccd90c8bda0204b55b3d6f594dcffd7f3432b948aed83a5251
SSDEEP

3072:fMXoEz8YK4gYQ5VYkc0UMBfmiVK+HLopIMEKc+XMP3JCZAXJJT9mbDG7b1PZBb:fMXN4YjfQ5hBfmy1n+XM/JCPC3JZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f015f73400b59cdf69c55f4aa9d0f39_JaffaCakes118

Files

0f015f73400b59cdf69c55f4aa9d0f39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b4e9428c639b2a7e987477751d5f64f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

advapi32

RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

rpcrt4

NdrFixedArrayFree
UuidCreate

kernel32

VirtualAllocEx
WideCharToMultiByte
lstrlenA
LocalAlloc
EnumResourceNamesA
RaiseException
MultiByteToWideChar
CreateProcessA
OpenSemaphoreW
GetSystemTimeAsFileTime
InterlockedExchange

shlwapi

PathFileExistsW

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ