2f60f7408c3d77a9ccc41a62f6b143d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f60f7408c3d77a9ccc41a62f6b143d1_JaffaCakes118
Size

37KB
MD5

2f60f7408c3d77a9ccc41a62f6b143d1
SHA1

395f88ac0f9605f5f41d59d1f38f002bf970dabc
SHA256

c51303734327dbf9e8d874f3e3eab14a7c932289c03fdc00de7c76774ce91e2f
SHA512

702a6333dc97e57e2d0419ce8733438866bafd3f46b492582b78695fe1e7c6740d6ea868faf20c92f2cffc4511557cbe11c5055504fc933361d2adf8f1eafa03
SSDEEP

768:uK+onFujyJNqdDk93V3KllYAyKmvYeepl/gcjNaROmg6SiiByKnE:f7JIy93V3KlByKyKnE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f60f7408c3d77a9ccc41a62f6b143d1_JaffaCakes118

Files

2f60f7408c3d77a9ccc41a62f6b143d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e484ffc36df51103ede65de79f5e6d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
SystemTimeToFileTime
ExitProcess
GetModuleHandleA
LocalFileTimeToFileTime
FreeLibrary
SetFileTime

advapi32

RegQueryValueExA

shell32

ShellExecuteA

msvcrt

??2@YAPAXI@Z

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ