4873a883740bd4b8067ad3543c4cf50e_JaffaCakes118 | Triage

Sharing

General

Target

4873a883740bd4b8067ad3543c4cf50e_JaffaCakes118
Size

40KB
MD5

4873a883740bd4b8067ad3543c4cf50e
SHA1

f5a0c84596222d526a6a87b71f9be15c3b54ea2d
SHA256

ff98fefb6ae9ea467d38b8309adf967bd6c3600476d25b0994af1de314f639c7
SHA512

3953668f1e77528f02b05283ea4ebd302aea9b11c8506b2f6d8f65a093087c4c9553fe76ad3e759aad916dc46340370d90ae0d62e524772c30595b6289944b43
SSDEEP

768:u+HkkZUff+SVwwS/we/nYHeruYJXQ5LlOsZNvPZ7/Txj:u+E4of+SYIcYHzNDZ/Vj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4873a883740bd4b8067ad3543c4cf50e_JaffaCakes118

Files

4873a883740bd4b8067ad3543c4cf50e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c008e1f84fece599f4a34ff2dc098b37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
MoveFileExA
SetFileTime
GetSystemDefaultLCID
VirtualFree
WriteFile
lstrcatA
GetProcAddress
GetModuleFileNameA
GetFileTime
ExitProcess
CreateFileA
VirtualAlloc
CloseHandle

advapi32

RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHGetFolderPathA

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE