608923e36eb1cb5354c51db69db118f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

608923e36eb1cb5354c51db69db118f1_JaffaCakes118
Size

116KB
MD5

608923e36eb1cb5354c51db69db118f1
SHA1

4ad555ff4a0a8a428631cdd7358126ed364a7cb6
SHA256

48a04f382d3310d275e93fda3d90ca146883a2b64ee8d0a886da28a841ae84a2
SHA512

fa7f176d5d7dce015598a8e6e7f8f6fc1bac4603bcdbe1afa7c3f42ae146ab0bdaf891904a0e4072b3c7da407d5f3d69d8933d22fe455e5f84db31c56575921e
SSDEEP

3072:rkxkxicQRgc4y/CAcrEAbuPC1RiAPLRYgR5X:Qc6JPclSPC1RiAPtB5X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
608923e36eb1cb5354c51db69db118f1_JaffaCakes118

Files

608923e36eb1cb5354c51db69db118f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88dab687fa9ee860bc2c24b861c5e8b6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp

kernel32

GetStartupInfoA
LoadLibraryA
VirtualProtect
GetModuleFileNameA

user32

SystemParametersInfoA
MessageBoxA

advapi32

RegQueryValueExA

shell32

SHGetSpecialFolderPathA

imm32

ImmInstallIMEA

Sections

.text
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dsf0
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.dsf1
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ