4680459633c68c8551a07dd48330a611_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4680459633c68c8551a07dd48330a611_JaffaCakes118
Size

29KB
MD5

4680459633c68c8551a07dd48330a611
SHA1

085b5a85800494c7d93f8e5f58ba57efae8ce37b
SHA256

ed64d5dd5e0073b9f81531c7363647b85d99c886e15304b29063285e2f494acf
SHA512

b464c8407fa00d1717354aa40594722720d8aee5af06e65ba44705ed6dfef837f8442e4a06a5c231cad73bd31940cb84ee182941790a6d49082670618492bf27
SSDEEP

768:0WqonWuznkWqmfwSIiY1arujlyT9ktP+:0gWupISI7Kujl+9k+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4680459633c68c8551a07dd48330a611_JaffaCakes118

Files

4680459633c68c8551a07dd48330a611_JaffaCakes118
.exe windows:4 windows x86 arch:x86

90a3983c39657901e2123b6f81e87d6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetProcAddress
GetSystemDefaultLCID
GetVersion
LoadLibraryA
GetFileTime
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
lstrcatA
ExitProcess
CreateFileA
CreateDirectoryA
MoveFileExA
CloseHandle

user32

EnumThreadWindows

advapi32

RegDeleteValueA
RegCloseKey
RegSetValueExA
RegCreateKeyExA

shell32

SHGetFolderPathA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ