61f4feaf20820f33e047c5060e82cf47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61f4feaf20820f33e047c5060e82cf47_JaffaCakes118
Size

10KB
MD5

61f4feaf20820f33e047c5060e82cf47
SHA1

55bf9d6dc9dbecaae9a80cc218dbc84c6c0c638a
SHA256

646b8b54af28dc1f3c3570f3b5dd5c5c732a11d0c39b455739a5df0048c4400e
SHA512

0af9e2fe7ff60d29b2dc575c7ab7222974ab20dd06e9e61c82260eeed398c35c1d8f4f1e4ac0e5d446df01e93dbea9b45f09231c17b16771f046fc13cb1565b0
SSDEEP

96:V4bXOlj0ZLAvzt2OBBJMx0SwT5Z6lp4hOwRVn767:+bXO+Z87p9NTUIOwR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61f4feaf20820f33e047c5060e82cf47_JaffaCakes118

Files

61f4feaf20820f33e047c5060e82cf47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

45a1ff4128109a1be73b340f641f9c56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime

shell32

ShellExecuteA

shlwapi

StrStrA
StrStrIA

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetTickCount
lstrcatA
lstrcpyA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

urlmon

IsValidURL

comctl32

GetMUILanguage

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE