406f7b0ae73ca3e644f4c13f944c325c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

406f7b0ae73ca3e644f4c13f944c325c_JaffaCakes118
Size

16KB
MD5

406f7b0ae73ca3e644f4c13f944c325c
SHA1

181f33b7e6658cb6aa31d77ce9b46153f4428ca1
SHA256

f1573627369be84ad8ef8af7f2099b2079215fc8ad8a57c146a2ca73115d2f0f
SHA512

768d12cabb88c63707985fd7e8a1786a12566eab07f021e6094068747561d0836336dbf088bce0e4bcae5b797764b4f36a82fc83c2c56ebe2899d29ea0cb80fe
SSDEEP

192:VWarvhjd6yNnDmcDBukQt1RdH0dHRdHwdHPH1SdHI18Gby8ypZ8MnT3P:3vh8yNacDMkQt1RqrmuOby8ypZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
406f7b0ae73ca3e644f4c13f944c325c_JaffaCakes118

Files

406f7b0ae73ca3e644f4c13f944c325c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE