34d7b820a28c2c4e7a65df33ad36eb43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34d7b820a28c2c4e7a65df33ad36eb43_JaffaCakes118
Size

34KB
MD5

34d7b820a28c2c4e7a65df33ad36eb43
SHA1

eb80b768a88cc6db1d2fcd146d3b622dd9ac5c6b
SHA256

4c152b0ded5052c3991a1f11ee42185952b3a15301d9ff32b0724de7064d1a75
SHA512

22de80999113d8d1f7fd354e396d6cfd69376ea3c56850ecf594710185ad67eb1a2fa08ed6d4cc68f2fbb1ad4305c86f790d830d2cdd51d892b0921342538541
SSDEEP

384:41ihcMd2rbsrbE9EUOg1R1WR3xhJjtS30GHTda1fYeibD:41ihVd2/s/E9EXwAbucJYew

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34d7b820a28c2c4e7a65df33ad36eb43_JaffaCakes118

Files

34d7b820a28c2c4e7a65df33ad36eb43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

952eccfa3e0f65648886e6dda6cf5d4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetVersionExA
GetWindowsDirectoryA
GetProcessHeap
HeapAlloc
HeapFree
LoadResource
LockResource
FindResourceA
GetModuleFileNameA
SetCurrentDirectoryA
SizeofResource
CopyFileA
lstrcatA
lstrcmpA
lstrcpyA
lstrcpynA
lstrlenA
GetCommandLineA
CreateProcessA
ExitProcess
DeleteFileA
MoveFileExA
RemoveDirectoryA
WritePrivateProfileStringA

user32

MessageBoxA
wsprintfA

advapi32

RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

comctl32

InitCommonControls

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE