2a8d1680460bfc95e40dd031e0eff908_JaffaCakes118 | Triage

Sharing

General

Target

2a8d1680460bfc95e40dd031e0eff908_JaffaCakes118
Size

9KB
MD5

2a8d1680460bfc95e40dd031e0eff908
SHA1

a4a225a4470a5cc5b1843f29a8ae03169d979dbc
SHA256

0ab37287b7541eaedbc44cc21c9b95def11ef95e6b8caf0f6502d9b4831c178d
SHA512

e4a66b57aed4fdec0874ef87d149717a179178241e7b0ced496ad72ef6774fb97cf56635ff54cc1f288675909ac8a5921bb4b4d1728ea18e15637b95449b3baa
SSDEEP

192:6/EDSNMB3ZMPhhJXteTWb8IzR/B1u/1u:6zlPDJX7b8IzR51

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a8d1680460bfc95e40dd031e0eff908_JaffaCakes118

Files

2a8d1680460bfc95e40dd031e0eff908_JaffaCakes118
.exe windows:4 windows x86 arch:x86

901ce691b8fa0b5ca1de27f26b1bc403

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

shlwapi

StrStrIA

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetVersion
lstrlenA
lstrcatA
lstrcpyA
Sleep

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

urlmon

IsValidURL

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE