45604a33f79a630ba6046f8d33176752_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45604a33f79a630ba6046f8d33176752_JaffaCakes118
Size

10KB
MD5

45604a33f79a630ba6046f8d33176752
SHA1

faffb8c694a847d498787db75c9f2826007f8e99
SHA256

437cbf7273f98fed99f1ace614cfb613099ae58f22c57a801f1ac8e57ecd1cea
SHA512

eda6827bcbddbb1e25a5f343ac498ba743a7a7253be626ba3075b8b1ca531b20bb4916e09eefd9a77396c002c3cfd04e00619badd7d633d931fe68dc06ebb39b
SSDEEP

96:V4B54sUmPS7OHKW7MpA4Sm6fSstL4U1qxRMEp4hpoRaDmxd67:+Qs3Z1Mq4Smqd47bIpoRaC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45604a33f79a630ba6046f8d33176752_JaffaCakes118

Files

45604a33f79a630ba6046f8d33176752_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c4d0ed13d8c8adf596c38319e773943

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayout

shell32

ShellExecuteA

shlwapi

StrStrIA

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetVersion
lstrcatA
lstrcpyA
lstrlenA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

urlmon

IsValidURL

comctl32

GetMUILanguage

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE