4381f473fbe7ecb97a5eeff0c6da036d_JaffaCakes118 | Triage

Sharing

General

Target

4381f473fbe7ecb97a5eeff0c6da036d_JaffaCakes118
Size

22KB
MD5

4381f473fbe7ecb97a5eeff0c6da036d
SHA1

15b598a296bbe864aeb7224142be26857767e281
SHA256

2d16110f90a5d75e3f3e19e5af03785f3e5691bfccca6a36b00afbcc4849180a
SHA512

222f1192883fb2e83e8cd1a29ccb50eb9b69ac50536432a4a6e9ecde82dce26cc9d0a6dad8c10c009f1dfbcc31af229322557c90436ee9cb1242885be7b72700
SSDEEP

384:buQW+iRogfGU1CxIRxW/tTwZrOFzll37znHZCq41N:zWUSGU1Cx3MZr6z3LzAFN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4381f473fbe7ecb97a5eeff0c6da036d_JaffaCakes118

Files

4381f473fbe7ecb97a5eeff0c6da036d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d4155fecfb54b99d7d2a7a898c2a883

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcess
GetEnvironmentVariableA
GetFileTime
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
FindResourceA
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
MoveFileExA
OpenFile
SetFileTime
SizeofResource
WriteFile
WriteFileEx
ExitProcess
CreateFileA
GetVersionExA
CloseHandle

user32

wsprintfA
MessageBoxA

advapi32

RegCloseKey
RegDeleteKeyA
RegCreateKeyExA

msvcrt

_wfopen

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ