2ae94a8b8676bd994ff0ccdb686f6d42_JaffaCakes118 | Triage

Sharing

General

Target

2ae94a8b8676bd994ff0ccdb686f6d42_JaffaCakes118
Size

3KB
MD5

2ae94a8b8676bd994ff0ccdb686f6d42
SHA1

c3734ee98c5976fb074f0e2ccabe705364aba4fb
SHA256

4ee148bcb2d3c1bfbf92e2f5bb72e91065194d52c642b9faa65fabdbcb362769
SHA512

590f33e8ac1e9fd9f6bd59f71419461e2bd71580ca738c82a5a332f67be5ec37ba5b5bb1ec9146836afb152d80e7962802b2456d5d5891b70fe37cbf87cf3bbd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ae94a8b8676bd994ff0ccdb686f6d42_JaffaCakes118

Files

2ae94a8b8676bd994ff0ccdb686f6d42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba0005f94fd650bbf6bc592fca2f3359

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetTickCount
GetTempPathA
GetPrivateProfileStringA
LoadLibraryA
GetModuleFileNameA
GetSystemDirectoryA
WinExec
DeleteFileA
GetProcAddress

user32

wsprintfA

advapi32

RegSetValueExA
RegCreateKeyA
RegCloseKey

msvcrt

strlen
memcpy
memset
malloc
strchr
_itoa
strcpy
sprintf
strcat
atoi

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE