254443ed0ceb21faac150d8857616aa8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

254443ed0ceb21faac150d8857616aa8_JaffaCakes118
Size

729KB
MD5

254443ed0ceb21faac150d8857616aa8
SHA1

508100088943d3d10aea7a06f66d91b284ac157d
SHA256

bff63bb3ea2620e7ae45ac7d4836f957ad1ff6ccf47caec70367cd6d1a26a480
SHA512

198405eb3c104ba8482a641d37a5e25235afe69a8136efb53161411bf633d03e16fe314d46115e0f2858c017bb35409b90fa105d6b5a1f5f697133a2fdc31b89
SSDEEP

12288:lzxveAzCmVC4pVQDALYmiVkbTIKqzg/zWrwYDd3x4VcpMOafuwo+:nmeCmVC4pVwALYmieb8RzYgh3x4AHa2U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
254443ed0ceb21faac150d8857616aa8_JaffaCakes118

Files

254443ed0ceb21faac150d8857616aa8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14b2a1e1ee054b100b047e8e6689e930

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
GetEnvironmentVariableA
MapViewOfFileEx
CreateFileMappingA
GetFileSize
GetLastError
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

Sections

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ