5bc2a96a8ef228b7d975a147dff18599_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bc2a96a8ef228b7d975a147dff18599_JaffaCakes118
Size

22KB
MD5

5bc2a96a8ef228b7d975a147dff18599
SHA1

2def3f0818c47ef33aa2ed078ffc0ae163eef82b
SHA256

f2c581c26273eadf249c6daa3dbd19401affb0fdad32e954e8ccd5912232b208
SHA512

0fa4e69f72cbee2960debc1e9b571eb7da3ba54311a8363a19336cb57ba4c82101abcef2d00b2a1db2b7ce16a4d8d60e82a0071e7e5a65794bced6e7f83c4411
SSDEEP

384:QTb4ZcgNTDVM9LcVmjJDv+zsYoQGse7NJVXcKlOxJFUm:3ZcwVK51v6NoTsgy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bc2a96a8ef228b7d975a147dff18599_JaffaCakes118

Files

5bc2a96a8ef228b7d975a147dff18599_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ebc0e4952544fda2469dd1c8c7424ffe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lclose
CopyFileA
CreateMutexA
CreateThread
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCurrentDirectoryA
GetCurrentProcess
GetDriveTypeA
GetFileInformationByHandle
GetFileTime
GetLastError
GetModuleFileNameA
GetProcAddress
GetProcessTimes
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
GlobalMemoryStatus
LoadLibraryA
OpenFile
ReadFile
ReleaseMutex
SetCurrentDirectoryA
SetErrorMode
SetFileAttributesA
SetFilePointer
Sleep
TerminateProcess
WriteFile

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA
ShellExecuteExA

Sections

.rhzki
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE