4b2079b9d101e9b5ea9011bdb01932a4_JaffaCakes118 | Triage

Sharing

General

Target

4b2079b9d101e9b5ea9011bdb01932a4_JaffaCakes118
Size

120KB
MD5

4b2079b9d101e9b5ea9011bdb01932a4
SHA1

9468319e22bf49df92102cbe59e85d05a6d79566
SHA256

2cb534ea090f79128c0c77386d2cc00176fa315ac6f7ce4e0ea4ab3ce08116d0
SHA512

0f715c8a634f47f9d8e4659a0be9f7997b4f059d7c0db612770892bd336c60a4002a21d66b567464378f4f272b88d8ecf99e36ee4fdc55fa3c28dc95de7a8e07
SSDEEP

1536:gwpMKOwLrHSlseGJ3ZQDIC0wSWHoNpLqdO/A+gC5e9KuFdBWqxW9SXfTckQQm:NhOw3EgJ2DLFqqVfKSKidJxW9SXfeQm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b2079b9d101e9b5ea9011bdb01932a4_JaffaCakes118

Files

4b2079b9d101e9b5ea9011bdb01932a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

27d74d302361d2fdf9fbdb797466dacc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenu

kernel32

GetTempPathA
GetWindowsDirectoryA
ExitProcess
WriteFile
lstrcatA
CreateFileA
CloseHandle
GlobalFree

shell32

ShellExecuteA

advapi32

RegSetValueExA
RegCreateKeyA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ