446c8fbc1e078d4de655eb5ed360455c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

446c8fbc1e078d4de655eb5ed360455c_JaffaCakes118
Size

40KB
MD5

446c8fbc1e078d4de655eb5ed360455c
SHA1

7e87fe3f620d087316f843e33057593c6f54f9b0
SHA256

09d0cf26aef8b3263d50534a5c760d3dbc0fd4c4b8dc1dbe65b85c86c2bf4d09
SHA512

b7f51f4589d37536375b85ba1096dbb97e4d92a93963bfeb2cf35f189a8781388ebee0eb5c67c5f2f6ac640eb87d11aa6cb0fa3ab97996fbbdd83a46e5dedbaa
SSDEEP

768:BXPzsHTm5RIMYozCjZCXRnIZRoc0O6lRAIE2OXnFoH/Ijlu4:JzLIMYoejZCX5IZRoc0O6lRFE20oHi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
446c8fbc1e078d4de655eb5ed360455c_JaffaCakes118

Files

446c8fbc1e078d4de655eb5ed360455c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

83e0fc697fe7689e729e6d8dc32e1481

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
MoveFileExA
SetFileTime
VirtualAlloc
GetModuleFileNameA
VirtualProtect
WriteFile
lstrcatA
GetLastError
GetFileTime
ExitProcess
CreateFileA
VirtualFree
CloseHandle

advapi32

RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHGetFolderPathA

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE