2ad0d192e0f10aeb8f777f36da9217e6_JaffaCakes118 | Triage

Sharing

General

Target

2ad0d192e0f10aeb8f777f36da9217e6_JaffaCakes118
Size

77KB
MD5

2ad0d192e0f10aeb8f777f36da9217e6
SHA1

6c4b729d354b39d41a99f3457f4ba7f30c639ed2
SHA256

325c7f2acc11093c37a812219d12f9b9eec9f890817dfbc4414700a753c96662
SHA512

26340ebdd51b9c48bf183c067f7eeda23a51caf223634d312118a01f33154c87f014690114f5c986486ceb692a7eefb08492427dd1fca71fa3e9848633b1ead8
SSDEEP

1536:DCJ1YGudb0fMD8noIpkKYuaFRN+3hA4eedT8V9OxzXQtLoKZLS/IB:DCCuEDGtpguaY3W4tdG9cQyALS/M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ad0d192e0f10aeb8f777f36da9217e6_JaffaCakes118

Files

2ad0d192e0f10aeb8f777f36da9217e6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

77ecc0b8bc53e033f77864a2655f6bfc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
WriteFile
GetSystemDirectoryA
CloseHandle
lstrcatA
SetFilePointer
CreateFileA
GetModuleFileNameA
FindFirstFileA
FindNextFileA
DeleteFileA
lstrcmpA
lstrcmpiA
ReadFile
FindClose

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA
StrRChrA

ole32

CoCreateGuid

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE