46d2a28fa79465966322373b83694829_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46d2a28fa79465966322373b83694829_JaffaCakes118
Size

22KB
MD5

46d2a28fa79465966322373b83694829
SHA1

fb95595bd4cf3e73815ce5ead4d9b008487b4fb2
SHA256

ff03428730be8967a014c7d343230b7445aaeecad2fb1abc20f5aafd08c41e1e
SHA512

53c6fb497c40e957b1572ad3d4775065c3163302fcfc2339576bded8bd59bab92ca50ab1c0fc2dce3ac6091697f5626852cc25c8c902a0c1f71786631bd7ac95
SSDEEP

384:ecnE0N9TugdeVfaO+BWVHcufg/1uR07MGLfBGmFRRZYcfH6kLmm:ecnHN9T9eBgWVHcufs8+7zVGa1Y8vLmm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46d2a28fa79465966322373b83694829_JaffaCakes118

Files

46d2a28fa79465966322373b83694829_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f13fa1a1394daf4bb47d46dbdf83dce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasEnumConnectionsA

kernel32

GetFileSize
GetLastError
GetModuleFileNameA
GetStartupInfoA
ExitProcess
GetCommandLineA
CloseHandle
SetEndOfFile
WriteFile
SetFilePointer
GetTempPathA
GetProcessHeap
WideCharToMultiByte
GetThreadLocale
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetLocalTime
GetWindowsDirectoryA
GetCurrentProcess
TerminateProcess
lstrlenA
LoadLibraryA
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
CreateProcessA
GetSystemDefaultLCID
RtlUnwind

user32

CharNextA

advapi32

RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA

ole32

StringFromCLSID
CoCreateGuid

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ