2ef012e4af8f532adefc5e183f9d96ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ef012e4af8f532adefc5e183f9d96ce_JaffaCakes118
Size

32KB
MD5

2ef012e4af8f532adefc5e183f9d96ce
SHA1

d2ca7491cae7c0684cdae150a2bafb10273285b3
SHA256

3fa2145d155ef918c7f2325f3ded892312ecb6d0a70f7b13cb73e17e031744db
SHA512

7b4baa19ba057e3425bf9e27b1f98a1288afcfadda1a15c847071b6399d7da641db98561f06b6a623f58bd6b3028d2ae7fe8df34bca74867469e37296806b550
SSDEEP

384:aFgdJj0mA+sdBcNKJjyjo9g+D6F1dsGcbeXcVM7hP6CTFbH:aF0JvA+YJjyADOsGcxq9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ef012e4af8f532adefc5e183f9d96ce_JaffaCakes118

Files

2ef012e4af8f532adefc5e183f9d96ce_JaffaCakes118
.exe windows:1 windows x86 arch:x86

7fdb713025327212d0c15d8a701c6f2f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

ole32

CoCreateInstance
CoUninitialize
CoInitialize

kernel32

GetLocalTime
CloseHandle
CreateFileA
GetFileSize
ExitProcess
WriteConsoleA
lstrcmpA
Sleep
GetSystemDirectoryA
GetVersion
MoveFileExA
ReadFile
CreateProcessA
VirtualAlloc
VirtualFree
GetModuleHandleA
WriteFile

sfc

SfcIsFileProtected

advapi32

RegEnumValueA
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegCloseKey

imagehlp

CheckSumMappedFile

Sections

CODE
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ