283b1b698c9ee284bf583233a944e0f4_JaffaCakes118 | Triage

Sharing

General

Target

283b1b698c9ee284bf583233a944e0f4_JaffaCakes118
Size

225KB
MD5

283b1b698c9ee284bf583233a944e0f4
SHA1

e58523cd40d3bbf836cf82d64fca100c4bf67c30
SHA256

2b5dd9c99fdd5c56a3aa26fd67d873f3b473bd27b6e46e23c661487a568013a7
SHA512

8a9d6d8e4fbf548eafe66edd145f8958bd1d510e94aa5fdd2e223921184054e32b5ddbfdb3d0de82560e38c3e51a3b7da10bc74344f1e9ba205362132229dc61
SSDEEP

6144:Nb6ztwtdoe1MSEoTSszh/U24bEkAjy059fthE:lPd9EEdjyi5E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
283b1b698c9ee284bf583233a944e0f4_JaffaCakes118

Files

283b1b698c9ee284bf583233a944e0f4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a4c3ed95a1bb8b5028f3c0b77572f36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
FindResourceA
GetModuleHandleA
FindClose
lstrlenA
FindNextFileA
FindFirstFileA
GlobalFree
CreateProcessA
GlobalAlloc
ExitProcess
LockResource
GetWindowsDirectoryA
GetSystemDirectoryA
GetCommandLineA
GetVersionExA
ReadFile
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
SizeofResource
CreateFileA
WriteFile
CloseHandle
GetLocalTime
SetFileTime

user32

wsprintfA

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ