4176fc496adc8a93374b70abc877bf32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4176fc496adc8a93374b70abc877bf32_JaffaCakes118
Size

28KB
MD5

4176fc496adc8a93374b70abc877bf32
SHA1

dd55a7fa3ce6af5a8d9b77477786ec1dd4cd4909
SHA256

f6ce3c84adbe67eaa00f3dcf0e6116db5ad88f7e622b8c17e6c4f3026f9200d2
SHA512

b92e333288781dec0c2771e88d0b33bdbd0c2784fb1be53c6490027f1a0f44af38a658e6e0a8fe12656b121c4c9076a3a7b809b988327bcdc988a0f11f9fc4ae
SSDEEP

192:najN66crc6rNjrhxciivSQTCZXLxrQX/wtVZvBhmZBdZDqs6/IErMIFL3xNACtfu:ap8LhXYT2JxZhml4strMyyY9mUrh6o5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4176fc496adc8a93374b70abc877bf32_JaffaCakes118

Files

4176fc496adc8a93374b70abc877bf32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c66c4bbf32a0c58625e04c01e8c26dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
Sleep
GetEnvironmentStringsW
HeapDestroy
HeapCreate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
DeleteFileA
SetHandleCount
GetStdHandle
GetFileType
VirtualAlloc
HeapAlloc
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

shell32

ShellExecuteA

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE