342e9a323d4f0fa7d1cf4ecffb96bfb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

342e9a323d4f0fa7d1cf4ecffb96bfb5_JaffaCakes118
Size

179KB
MD5

342e9a323d4f0fa7d1cf4ecffb96bfb5
SHA1

b0750f5c3d7f0f476c8c807de0ead1f2b177ae30
SHA256

5657a4a5a9fbdb9aad7faebbed2ae98e3063a3381f8b1f0154fd739be4d925e8
SHA512

7a21a46955661dc18133480454b33d9a6620863432595ca829d092a1699f4960c9e25b0c95cdeec81352a9b1547171e0e9a4b34a4e9e72816c87a87c32748a73
SSDEEP

3072:t9wEDLFI8dHtiabdCWxVlHpQU5531yHTESQ8vOsqbPadeOnIyFUB9zSwQvfTO:t9n+8dH08AuHKwTcTESQ8vOsq7s3K2i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
342e9a323d4f0fa7d1cf4ecffb96bfb5_JaffaCakes118

Files

342e9a323d4f0fa7d1cf4ecffb96bfb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f5cb4382f2f43770c368901be3308bc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

advapi32

RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueExA

kernel32

VirtualQueryEx
MultiByteToWideChar
LocalAlloc
CreateProcessA
EnumResourceNamesA
GetSystemTimeAsFileTime
WideCharToMultiByte
RaiseException
OpenJobObjectA
lstrlenA
InterlockedExchange

shell32

SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation

ole32

StringFromIID
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

shlwapi

PathFileExistsW

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ