18114953eefb3594cd204088e585b113_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18114953eefb3594cd204088e585b113_JaffaCakes118
Size

32KB
MD5

18114953eefb3594cd204088e585b113
SHA1

19898fa3cc58cacd3d8c325856f18aa0988fabb6
SHA256

64333befac0f709688946af3b5294381d34ba7bf1c4e95867096832359ac2313
SHA512

d5c8098915c5d6e0c53e9f380074f6f6fd1c1851ca75d1e617beb3165b736fe79304bddd234750486b94c714423afa1e688a2c021b3612477d3419b6931ab4ef
SSDEEP

768:jFi1D3vp1qUjP/H2RFLPxU+btcsgw+YVd9Qj:B2vqr9PxDtcsgw+6d90

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18114953eefb3594cd204088e585b113_JaffaCakes118

Files

18114953eefb3594cd204088e585b113_JaffaCakes118
.exe windows:5 windows x86 arch:x86

00e24b270f04dc51172be33fdeca02d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

msoobe.pdb

Imports

advapi32

RegOpenKeyExW
RegSetValueExW

kernel32

ExitProcess
GetLastError
FreeLibrary
GetCommandLineW
GetProcAddress
LoadLibraryW
WritePrivateProfileStringW
ExpandEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime

user32

wsprintfW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE