2f699fb440f45e9a11e60807e20597ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f699fb440f45e9a11e60807e20597ad_JaffaCakes118
Size

183KB
MD5

2f699fb440f45e9a11e60807e20597ad
SHA1

cc04d93cbe13db38159fc24c3e4ac7541e557fe7
SHA256

3c08d42c6cf6c868f4f10680ee3c20df89af32b85c22b2fc8163c2541bd47720
SHA512

cea53046cd39b5b9993d1ddd2765c12db2fe2a1cd6e3c16574a8ecf6ced41b16dae0d9b8a249eab85a84fc65b9dd206488c8aab98ef9efcd6077ab11bbf8413b
SSDEEP

3072:c7Lf1FCIZ5jky9xvCtYdAlupGdYHpIx8GmxFlKLoxRQDAYqqI9SutKJDrVvlg/Cf:qLfOIZZkyauAyJI2NlKs3QMzqI9rk/hh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f699fb440f45e9a11e60807e20597ad_JaffaCakes118

Files

2f699fb440f45e9a11e60807e20597ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

650f89c84b8158b95e4dab71ca81d405

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW

rpcrt4

NdrFixedArrayFree
UuidCreate

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegSetValueExA

kernel32

VirtualAllocEx
CreateProcessA
RaiseException
lstrlenA
EnumResourceNamesW
MultiByteToWideChar
GetSystemTimeAsFileTime
WideCharToMultiByte
OpenWaitableTimerW
LocalAlloc
InterlockedExchange

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ