39540f2ac5f429c86e35f08a22e63556_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39540f2ac5f429c86e35f08a22e63556_JaffaCakes118
Size

34KB
MD5

39540f2ac5f429c86e35f08a22e63556
SHA1

35b0c2a01a58ce3cce4bea09dc00429e14f98921
SHA256

cc43526831bdb22a12fb9b709aa43a2b726ced0ecfff161dec4b9464fdd6bcc3
SHA512

6313bd4f90eba3369e315458a6cf2d984918ed980ae2cb628a57b79046db03a454c7284d9d10f24a173eb36f45b2925a8c17b161faff6990a14f7a7edca9ffbb
SSDEEP

384:c38rAirUd08G45b15q9SZldBZoHZ8QzD9oVRgHRpFuhih:cM3I08G2q9uo58QR8hih

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39540f2ac5f429c86e35f08a22e63556_JaffaCakes118

Files

39540f2ac5f429c86e35f08a22e63556_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dea54661c98ab90e134aafea4e06329c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
lstrcatA
ExitProcess
DeleteFileA
CreateFileA
WriteFile
WinExec
CloseHandle

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE