1592e89f84b6b63070212b47c2414afe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1592e89f84b6b63070212b47c2414afe_JaffaCakes118
Size

17KB
MD5

1592e89f84b6b63070212b47c2414afe
SHA1

4bdd2ff8762df70199c54614a9c24d5dd77ce357
SHA256

0d162b2f9fb00180f72588f5a072bd3afdca60c258eb5fc0361a94483386d41b
SHA512

4068a94c9d96609425e2f5f156ed424e150d038a9fc4c5fba057a2d824977c3f92d6c1eb7f9dc57e2a341c6fe00be244d84cdfce5ce612ed57a18244f60cee52
SSDEEP

384:hBj+Y+MdWTQfF6PT3uu7gQ7nJdO4BGm4hEEZBFfZU+c5lX86T:r+gWkd6r+u7gkLO4IhFfZ5gl7T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1592e89f84b6b63070212b47c2414afe_JaffaCakes118

Files

1592e89f84b6b63070212b47c2414afe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ad8056f7a75fdb259683183b66f334a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GlobalReAlloc
GlobalAlloc
GetFileSize
FindClose
lstrlenA
FindNextFileA
FindFirstFileA
CreateProcessA
DeleteFileA
GetExitCodeProcess
CreateFileA
ExitProcess
GetCommandLineA
GetSystemDirectoryA
GetLocalTime
SetFilePointer
CompareStringA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
WriteFile
CloseHandle
SetFileTime
Sleep
GlobalFree
HeapFree
VirtualFree

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA

urlmon

URLOpenBlockingStreamA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE