151bfc12370a456fb53559a5ed023300_JaffaCakes118 | Triage

Sharing

General

Target

151bfc12370a456fb53559a5ed023300_JaffaCakes118
Size

4KB
MD5

151bfc12370a456fb53559a5ed023300
SHA1

42341c77b106a984bc12b5b94e2c1e540bfcf6ca
SHA256

b3433bfa474d012c61927e7ed40972286953e60b80fffa7636b4229ca6866fa3
SHA512

65513a4d02a49b0563aa8c321b4ada4dcce5d2f6a3b4ac145a296e18b99e7c1b0fef53e1d4b0093663479c7ba4555a95dc7db9c4fec135fa961c4b92bb934045
SSDEEP

96:O/4z9ZzuPxslRxD9VsQHldgOkID5EDlyTUoyn:GEpZFRD+sTUoyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
151bfc12370a456fb53559a5ed023300_JaffaCakes118

Files

151bfc12370a456fb53559a5ed023300_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5268bad1a300951cd98a52b6a93b8abf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
SetThreadPriority
GetModuleFileNameA
DeleteFileA
GetSystemDirectoryA
WinExec
GetModuleHandleA
CreateProcessA
ResumeThread
GetShortPathNameA
GetWindowsDirectoryA
GetStartupInfoA

user32

wsprintfA

advapi32

RegOpenKeyA
RegCloseKey
RegSetValueExA

msvcrt

exit
sprintf
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ