35016322a768685bf59f5484f00e8a12_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35016322a768685bf59f5484f00e8a12_JaffaCakes118
Size

17KB
MD5

35016322a768685bf59f5484f00e8a12
SHA1

cdb16870c0d7050a22ad3a6922abca39a159a4b6
SHA256

e5b5b45faad4566fa21ac17a6aa10b697d0584a18253b5f8f3ad9653f6b33d23
SHA512

921ce8b808b52865f2b7b7d713cace898d05eee9236ef870cd29e9aebe62740e53853e29cb213e51dc46f7ce947a1fbd772d4929345ba024e8174ee72179eed5
SSDEEP

384:oFFr+VOZ9cmZO2Zp+Nye8pqrmub8TyztsDN:ojrBZ9oKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35016322a768685bf59f5484f00e8a12_JaffaCakes118

Files

35016322a768685bf59f5484f00e8a12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE