3cc34427403f84d82babd826c4d4539e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cc34427403f84d82babd826c4d4539e_JaffaCakes118
Size

25KB
MD5

3cc34427403f84d82babd826c4d4539e
SHA1

ff04b5862a41e5d0d73054db1b8cc5927f4b7d9d
SHA256

e32716d6fd4ef1f93c32a30e5a6178340f588b7b3ec55469d515c274e8fc308d
SHA512

79d1a4c4392967d09162af8abeccef356af74645cad74cc04c5b9163d8f635b5755808c5ed80c79b3a880a27a5f3c9751f918788413819989680b8e38ce9a371
SSDEEP

192:AYKKXmaFjRkmgRJXHPu4WlQcdH0dHRdHwdHPH1SdHB18GZCpu11K7kvBPenT3bvb:hXmaFjjkvuP6cqrmuJ22avBR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cc34427403f84d82babd826c4d4539e_JaffaCakes118

Files

3cc34427403f84d82babd826c4d4539e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82ed699d4cad81fb8bdc7c975915ad7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateMutexA
GetLastError
ExitProcess
CreateFileA
GetFileSize
GlobalAlloc
ReadFile
CloseHandle
GlobalFree
WriteFile
WinExec
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
OpenFile
FindFirstFileA
FindClose
FlushFileBuffers

advapi32

RegCreateKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA

shell32

ShellExecuteA
SHGetSpecialFolderPathA

urlmon

URLDownloadToFileA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE