3005522b77b6226aafdb0c9ee0588eea_JaffaCakes118 | Triage

Sharing

General

Target

3005522b77b6226aafdb0c9ee0588eea_JaffaCakes118
Size

10KB
MD5

3005522b77b6226aafdb0c9ee0588eea
SHA1

d4ebc1334eb24f7f611fbf9479e40aee765fcc0d
SHA256

1d123386987c2d50f979fae04412fa37d3550b0d584067c97399562366962da0
SHA512

0776410b11e2ab611c65afa5a50de54505fb0995098174e118e064b331ff5582eccd0072263680916ba6f35ae410fa5a8a794cb3500b9c364b87f60a38d6c394
SSDEEP

96:JDFv4cmyeRveh/tvPxfHTa3Qq7tPN66cIG5v8lp4hfGR73yIVQCrtXw67:z4c6Rmh/nfGgqVoXI66IORr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3005522b77b6226aafdb0c9ee0588eea_JaffaCakes118

Files

3005522b77b6226aafdb0c9ee0588eea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

25c268077656061ef30cbda8cab4da53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

shlwapi

StrStrA
StrStrIA

kernel32

lstrlenA
CloseHandle
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
lstrcpyA
Sleep
lstrcatA
GetTickCount

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

urlmon

IsValidURL

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE