3deb57809f41d13454bac057e02e3efa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3deb57809f41d13454bac057e02e3efa_JaffaCakes118
Size

7KB
MD5

3deb57809f41d13454bac057e02e3efa
SHA1

9f4ed67969ca931ab4ec583ebe7539777d33224e
SHA256

1a158fe164aeda1c0aa2a0d36bbb5c4e363df513c861853f9fa342351e064d0c
SHA512

bf6d6595af4cd67e07987885db8b0908eb18262edce8e0f35caa5aff76efef6ccef273f728abb133a4046998c1779ec743fedfa9b6a42c3c7d188f05da4766b8
SSDEEP

192:0W58WvpB7gCkyhyf2QXk6Cr4L5rNlN5lLF2Z/MNcFT:eO3gwfsOkrNlnlLF2JM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3deb57809f41d13454bac057e02e3efa_JaffaCakes118

Files

3deb57809f41d13454bac057e02e3efa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55259ab7b3e0661cf67de9fd17edee19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
lstrcatA
GetLastError
CopyFileA
DeleteFileA
ExitProcess
HeapReAlloc
lstrcpynA
HeapAlloc
HeapFree
WriteFile
GetProcessHeap
GetVolumeInformationA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
CreateThread
lstrcpyA
GetCommandLineA
GetSystemTimeAsFileTime
lstrlenA
SetFilePointer
GetTickCount
CreateFileA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

shell32

SHGetSpecialFolderPathA
ShellExecuteA

wininet

HttpQueryInfoA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
DeleteUrlCacheEntry
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ