3051ffacaf6cb68e911bae93d5f4c83c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3051ffacaf6cb68e911bae93d5f4c83c_JaffaCakes118
Size

11KB
MD5

3051ffacaf6cb68e911bae93d5f4c83c
SHA1

a9104243cbb9f701bd15bfa658871d0906e9f764
SHA256

160fc6b97cbd61cc586d27ffdcf6d00907f071e1b955b6e45db4fc025f48e66e
SHA512

27cdc726bbed92a22e492997b335427faf410d227ff38a33afa70416e8fdc974809f0c2cb2fad38f661d7e5eb54182a5585b8610517fd7e45691d6f00d9ce0e6
SSDEEP

96:CAQQf3Lk4OeikT3ME4cjyBx4k45kV4+H41+l+HDklIokpcoTdhh33hu27:Cyf3qeikT/4cO454YXcoZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3051ffacaf6cb68e911bae93d5f4c83c_JaffaCakes118

Files

3051ffacaf6cb68e911bae93d5f4c83c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f8bb99656cd0fb6109bb21b405f4be02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayout

shell32

ShellExecuteA

shlwapi

StrStrIA

kernel32

lstrlenA
CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersion
LoadLibraryA
lstrcatA
lstrcpyA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE