652853d0616ab003d1a55e44ec024731_JaffaCakes118 | Triage

Sharing

General

Target

652853d0616ab003d1a55e44ec024731_JaffaCakes118
Size

36KB
MD5

652853d0616ab003d1a55e44ec024731
SHA1

510dad21adcb94ec53b4c6f7aa64f025d4c1635e
SHA256

c1dbac794e27d8242d3e363d17e2e3454ce834ec666bf14de6a5cedd69b9981d
SHA512

3870a3767b928939c3ae66b02d248984eea66d87d9ff97875e7f15244ee6b21627cadd59d79c3c59a0452fa0472aaddb071bed412fef0b211c9b2bf31c4ba166
SSDEEP

768:U8LorqCVgPZGaadMGGOy7Cz4s1cG9U6o:USJQaadMGSmLo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
652853d0616ab003d1a55e44ec024731_JaffaCakes118

Files

652853d0616ab003d1a55e44ec024731_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c47419c9972743f0dd65ea2a389e88c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA
CreateFileA
WinExec
Sleep
GetComputerNameA
ReadFile
CloseHandle
GetModuleFileNameA
GetModuleHandleA
FreeEnvironmentStringsW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetVersionExA
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

RegSetValueExA
RegCreateKeyExA
GetUserNameA
RegOpenKeyExA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE