3dd877da1d926459e788f14c0e33fe26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dd877da1d926459e788f14c0e33fe26_JaffaCakes118
Size

17KB
MD5

3dd877da1d926459e788f14c0e33fe26
SHA1

f8ac08d64b0d04668c08cd410f823e9b5bc38caa
SHA256

9c21c666230ad0b6faaa3b938b54b98d0d27cf6e52aa7ff13e77eca706c5ed72
SHA512

c95e82d29f3ef05d6ba29a475e8e0d9c164cdab06ffb1036dddafbfa3add85d7e159a1cec93cf3bdc154ff0e10c2325cc1ccfa65faa3c43ef14ecd1e9ad8dfa7
SSDEEP

384:3FWs3ybucmZO2Zp+Nye8pqrmub8TyztsDN:3IpbuoKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dd877da1d926459e788f14c0e33fe26_JaffaCakes118

Files

3dd877da1d926459e788f14c0e33fe26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE