270dcc286267cb7825a4b1b9c060bc17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

270dcc286267cb7825a4b1b9c060bc17_JaffaCakes118
Size

194KB
MD5

270dcc286267cb7825a4b1b9c060bc17
SHA1

e40a2443276f152805d14487e88668532473e75e
SHA256

b8cb4bed0db132a8af9b3fd4e44a87ab6a1418dc3cb4b60a490215062a378896
SHA512

24ac3fd69ac740df6c8ff302dfbdfe8cef776ae90a7d9a78f5c11048357135f9ef8ec1ae2fad6188570f67b6d25fc8209c79a66ff250aee1c0dd9c22edb82c2a
SSDEEP

3072:P2UTj17ey7VOZnrwdVoPFHGRuY4euLV7/AtfbMQGHBqUypKDLjf9eqbUES:Px7eKQZn7PZB/eWLKfAdHBU2Lz9eIS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
270dcc286267cb7825a4b1b9c060bc17_JaffaCakes118

Files

270dcc286267cb7825a4b1b9c060bc17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77d5338c8b1d545bef32bbc12dc52d08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyExA
RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA

rpcrt4

NdrFixedArrayFree
UuidCreate

shlwapi

PathFileExistsW

shell32

SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

kernel32

VirtualAllocEx
CreateProcessA
LocalAlloc
lstrlenA
EnumResourceNamesA
WideCharToMultiByte
GetSystemTimeAsFileTime
RaiseException
OpenSemaphoreW
MultiByteToWideChar
InterlockedExchange

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ