102fd384fe50b76368c194c043dfbd2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

102fd384fe50b76368c194c043dfbd2c_JaffaCakes118
Size

5KB
MD5

102fd384fe50b76368c194c043dfbd2c
SHA1

a55b14a65360aee2d37e6eb5cdfe4d3d77155dcc
SHA256

e79ce20c33494ac1342255e175e7a11e0fd33d1189b87d6bb686ccd586990b49
SHA512

13f1bece1aecac2be045433b7929dce7c3d70fc1a63e06fdeeb71cd46a1d78515bd72254c5eb6119a93304d6f120db887f4c25d3a190e4d0127d32e5413d0614
SSDEEP

48:inbaYeiJQVF3NDGdx0J2vkeIbbfR8gojjZo1orf0LFZ+BMAEbjY/f7T:EJmcw5zRDoj6ir0LFABCbjY/fX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
102fd384fe50b76368c194c043dfbd2c_JaffaCakes118

Files

102fd384fe50b76368c194c043dfbd2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f6ffb93b30e27a7ce1da4de72e266633

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetFileSize
CreateFileA
FindFirstFileA
GetSystemTime
CloseHandle
FindNextFileA
SetComputerNameA
CopyFileA
RemoveDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
FindClose
MoveFileA
lstrlenA
lstrcatA

user32

wsprintfA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 639B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE