48007f2ef3340dee8a5319d18908b37e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48007f2ef3340dee8a5319d18908b37e_JaffaCakes118
Size

225KB
MD5

48007f2ef3340dee8a5319d18908b37e
SHA1

facdc6f24257922298648ca5d1745a77a28be470
SHA256

565641adadba2d7e01b6237692dc4434fb9445f97c6a965675f51517a7b7f814
SHA512

2364ec557fbf49aec3a211a3dcbfbeeb8a22f67b865944a4c770e54ef20df936fc0d41c216a5a6e87c2f10e1049e69a000db1e970aee0e902b2b48db726bfb50
SSDEEP

6144:Nb6ztwtdoe1MSEoTSszh/U24bEkAjy059fth0:lPd9EEdjyi50

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48007f2ef3340dee8a5319d18908b37e_JaffaCakes118

Files

48007f2ef3340dee8a5319d18908b37e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a4c3ed95a1bb8b5028f3c0b77572f36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
FindResourceA
GetModuleHandleA
FindClose
lstrlenA
FindNextFileA
FindFirstFileA
GlobalFree
CreateProcessA
GlobalAlloc
ExitProcess
LockResource
GetWindowsDirectoryA
GetSystemDirectoryA
GetCommandLineA
GetVersionExA
ReadFile
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
SizeofResource
CreateFileA
WriteFile
CloseHandle
GetLocalTime
SetFileTime

user32

wsprintfA

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ