35f878a1ae13ad1b2247bf09a534efdf_JaffaCakes118 | Triage

Sharing

General

Target

35f878a1ae13ad1b2247bf09a534efdf_JaffaCakes118
Size

22KB
MD5

35f878a1ae13ad1b2247bf09a534efdf
SHA1

5894467809f78a397fad431e2b169cc7c2450191
SHA256

cdb094bfdd8ff5fe503c86060df38500b1fed377d11f5cfd5c41b0de10b5a5d0
SHA512

7f33b9fef65db4e0561b8f33457e768221e1287b51f9ae583ed5393d757efbd1882bfbce235cfa1bd0f65299e4a624e2d579d7036974b5657829f6eae493753a
SSDEEP

384:QTb4ZcgNTDVM9LcVmjJDv+zsYoQGsV7NJVXcKlOxJFU5:3ZcwVK51v6NoTsFy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35f878a1ae13ad1b2247bf09a534efdf_JaffaCakes118

Files

35f878a1ae13ad1b2247bf09a534efdf_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ebc0e4952544fda2469dd1c8c7424ffe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lclose
CopyFileA
CreateMutexA
CreateThread
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCurrentDirectoryA
GetCurrentProcess
GetDriveTypeA
GetFileInformationByHandle
GetFileTime
GetLastError
GetModuleFileNameA
GetProcAddress
GetProcessTimes
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
GlobalMemoryStatus
LoadLibraryA
OpenFile
ReadFile
ReleaseMutex
SetCurrentDirectoryA
SetErrorMode
SetFileAttributesA
SetFilePointer
Sleep
TerminateProcess
WriteFile

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA
ShellExecuteExA

Sections

.rhzki
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE