19252af5c4351c2045bfd34c6952723c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19252af5c4351c2045bfd34c6952723c_JaffaCakes118
Size

40KB
MD5

19252af5c4351c2045bfd34c6952723c
SHA1

74f456fb0c4bb8b71e2659b5df2afbf09af4d2d1
SHA256

eee42897c1e61538817b74526793b359b4ede828a5c5d270226102ba978be82b
SHA512

cad4e346281aa147b98ffe4ca736cc2cffbad538e9d85da648ec43ca6d22675c9c6583f7130db97baf9ab282382511553537c76a53839eb6c86bb807da8ca093
SSDEEP

768:fAo2yKLyZZbm49KRUsAQj+1yAYMj98Rm4xAjEKWl:Yo2yBZ6qcUsHm9AROjEDl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19252af5c4351c2045bfd34c6952723c_JaffaCakes118

Files

19252af5c4351c2045bfd34c6952723c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2beb1f20619de7c13e61c83e8022211

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
MoveFileExA
SetFileTime
VirtualAlloc
GetModuleFileNameA
WriteFile
lstrcatA
lstrlenA
GetFileTime
ExitProcess
CreateFileA
VirtualFree
CloseHandle

advapi32

RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHGetFolderPathA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE