23fbab57a7c26f4f4b96ae447828fae0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23fbab57a7c26f4f4b96ae447828fae0_JaffaCakes118
Size

56KB
MD5

23fbab57a7c26f4f4b96ae447828fae0
SHA1

f6c7aecafb3362a2cae12daf544ea344f04c04bd
SHA256

83398fa512de92fbae08592ba5e5b141a4cc146ef45c0baed861108562063da7
SHA512

b471742d578934f5c65c12f575f5b8a644a97bcc4260ec0ded1fe8c1222e6bbb1f06c16fe07ffc5074d6b099861510aecfd672f795c04699f02e5c228f4994e1
SSDEEP

384:fSpRat5n1CJvK5PrHMHhdLwx+EDgXZ/kimh+QwxYw5srrPI3oqD72UQSRahdlK0u:fZ58JWrHMHIxngJdm4QgB54zeNK3Rvq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23fbab57a7c26f4f4b96ae447828fae0_JaffaCakes118

Files

23fbab57a7c26f4f4b96ae447828fae0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b19ff5911c2d4dae8c78b42d99c14be6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CloseHandle
WriteFile
CreateFileA
SetFilePointer
LockResource
ReadFile
FindResourceA
GetModuleHandleA
lstrlenA
lstrcatA
GetSystemDirectoryA
WinExec
SetFileAttributesA
GetLastError
lstrcpyA
CreateDirectoryA
LoadResource
SizeofResource
CopyFileA
GetProcessHeap
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess

user32

wsprintfA

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA
RegEnumKeyA
RegCreateKeyA
RegOpenKeyExA
RegDeleteKeyA

shell32

StrStrA

msvcrt

_local_unwind2
_except_handler3

Sections

Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE