61d43552828bcf955dd1a8ec645a467d_JaffaCakes118 | Triage

Sharing

General

Target

61d43552828bcf955dd1a8ec645a467d_JaffaCakes118
Size

9KB
MD5

61d43552828bcf955dd1a8ec645a467d
SHA1

ff42596b5eb41ffd004b931c1326d4b3b2cb19e6
SHA256

bba898d6d5d3ad092b82adf612150dfac36d430a1cffb0bd313d76ccb669e89c
SHA512

3236626fd7c30b7ad548d227dade9c055777c888be63abbc1d51424c7d0f887a429bc470ad0b0d057572a48f6bc6a678005699d3407120cb4b5e11baaaaf9419
SSDEEP

48:iwEuvabfnIo1ctcDMgA2cmGTmFUHgzX15sJe15s9npByhF9Yw+CoM01PPEbNfgtd:5vabfIo1Wv2zFnzQp4hFSes3Eh67

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61d43552828bcf955dd1a8ec645a467d_JaffaCakes118

Files

61d43552828bcf955dd1a8ec645a467d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b25c463b9a3691e6cd88a09ada67d17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayout
GetDoubleClickTime

shell32

ShellExecuteA

shlwapi

StrStrIA

kernel32

lstrcpyA
lstrcatA
CloseHandle
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetTickCount
GetVersion
Sleep

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE