190d9dc5cb78ab5646cc904111382e69_JaffaCakes118 | Triage

Sharing

General

Target

190d9dc5cb78ab5646cc904111382e69_JaffaCakes118
Size

88KB
MD5

190d9dc5cb78ab5646cc904111382e69
SHA1

68359ff6cb1feb399f297486c194ec75a3ebc2ac
SHA256

44f0015580531a61252a9891d33d3a22429099b6412f507e0ca8ccfbbe7c1869
SHA512

d6e2cf0d51b868d610817900a539ba541787686a997039cdf68d2f6e603037b206d1252f733d04018c88a1b152e9a9ff1b00153ebfde9d49503bec5321d92aec
SSDEEP

1536:9Cc1YGh1INa+rMA4t328o5dOYtJeItr6GqOstl6zdt5OcgCg9:9C0+rMntGbDoQ6Gq3tlgdtIYg9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
190d9dc5cb78ab5646cc904111382e69_JaffaCakes118

Files

190d9dc5cb78ab5646cc904111382e69_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77ecc0b8bc53e033f77864a2655f6bfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
WriteFile
GetSystemDirectoryA
CloseHandle
lstrcatA
SetFilePointer
CreateFileA
GetModuleFileNameA
FindFirstFileA
FindNextFileA
DeleteFileA
lstrcmpA
lstrcmpiA
ReadFile
FindClose

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA
StrRChrA

ole32

CoCreateGuid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE