5c242db332ffaf1208cd270657a7da92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c242db332ffaf1208cd270657a7da92_JaffaCakes118
Size

6KB
MD5

5c242db332ffaf1208cd270657a7da92
SHA1

adea1a86146651ffb373b55b57a79c022702eb96
SHA256

4877ef53d3488597785fa9893ac57f6bb8ea43b6fdd27c2a5eee41fce341e692
SHA512

1a8e4db5e6b47909ab85dc1651af18f71b74cc09add64ada923370a348a0aedf3f439ea9ef8796f73d234111fb69efedbe93c7995fdd942063890d5c12420329
SSDEEP

96:6fo/POPueh51TMT6qsJ77ahFmrcCgn17XHyHgSAKia5o/yCurHleDvlk/:6fo/eh51TMT9sJcCgxXHyHgS00o/ypTN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c242db332ffaf1208cd270657a7da92_JaffaCakes118

Files

5c242db332ffaf1208cd270657a7da92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

088c50bc7e4b3b652940aebc6f90fd37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GetModuleHandleA
OpenProcess
ExitProcess
Sleep
WinExec
CopyFileA
lstrcmpiA
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ResumeThread
WriteProcessMemory
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
CreateRemoteThread
CreateProcessA
CloseHandle
RtlUnwind

user32

FindWindowA
GetWindowThreadProcessId

advapi32

RegSetValueExA
RegCreateKeyExA

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ