2c32f844e0cd375070e06bb9e0e215da_JaffaCakes118 | Triage

Sharing

General

Target

2c32f844e0cd375070e06bb9e0e215da_JaffaCakes118
Size

16KB
MD5

2c32f844e0cd375070e06bb9e0e215da
SHA1

20e1f35297d62e3cdc6ebbf8788649eed1854655
SHA256

93278a2db71873c7503dd0986c31c4b41d7ff649ef8cd07986278595e5e65933
SHA512

1265345ca01a7cdb5ae2de6ee3589feebf22967af0e25281a10222f8429fa507f667e5d4998d6173201c90bbf72713af673becb712b6f405c90f961954416a17
SSDEEP

192:f83msQ4B1Z8F274/JQtCBdH0dHRdHwdHPH1SdHK18G+j5P:f+mcB1Z8jxQtCBqrmuw+B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c32f844e0cd375070e06bb9e0e215da_JaffaCakes118

Files

2c32f844e0cd375070e06bb9e0e215da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40c3e825b117e42d1038dc7e7c689122

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
Sleep
CopyFileA
GetLastError
ExitProcess
CreateMutexA
OpenFile
FindClose
FindFirstFileA

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE