4af4e3279b559c99e4662da11aa3e602_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4af4e3279b559c99e4662da11aa3e602_JaffaCakes118
Size

20KB
MD5

4af4e3279b559c99e4662da11aa3e602
SHA1

bcd8702605d7cb7f5e96e54d478a46e549468f2b
SHA256

c2c9e91fd3a9585231daeb2a05c81939470f3f8d25a79b7f0023a030c3acb073
SHA512

1fc57adf1e3932b4a7177e8f938ca5ff481e8deb53406cbc2ed2390111b00d289177bfeb5c286da2f0d77bc21e92429fb65e91dc7a4d2cd8383f7d333b1fb459
SSDEEP

96:EDYmnaOHSr+6iVq1jRsZ36hKcwm6XvP363Eg+gSU6h8Xe+TIprQhv:EDDaOHSr+3MSZ36TwDXv/1Q1Y202hv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4af4e3279b559c99e4662da11aa3e602_JaffaCakes118

Files

4af4e3279b559c99e4662da11aa3e602_JaffaCakes118
.exe windows:4 windows x86 arch:x86

467e957bd1c2f97fe709adc5d0fc3d12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetWindowsDirectoryA
CopyFileA
CreateToolhelp32Snapshot
Process32Next
CloseHandle
TerminateProcess
WinExec
lstrcatA
lstrcmpiA
OpenProcess
Process32First
Sleep

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey

user32

MessageBoxA

Sections

secu
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE