628cbbea9d94389a6d52d6b4a34ae3ce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

628cbbea9d94389a6d52d6b4a34ae3ce_JaffaCakes118
Size

18KB
MD5

628cbbea9d94389a6d52d6b4a34ae3ce
SHA1

01ff3171bc196eae461a0d724eb94185aee88130
SHA256

c3d5a937f3545dafa30e32b92970097f44f05b1c791860cc24388cc94ac7a171
SHA512

09dc218bb0457e8346492efe7aa56f6139bcdb0dcc95b65a99fe78fd8f6d9f95ac1f5448956641f692749d6de1f86a7fe9012a8db1db004f585349cd50a4cacb
SSDEEP

384:tPmOSOSNAzKKDmrU5+GeqHei3S/fre2KDuc:tPYOLz4rsrHeiWfyEc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
628cbbea9d94389a6d52d6b4a34ae3ce_JaffaCakes118

Files

628cbbea9d94389a6d52d6b4a34ae3ce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c36d8a52c772816563c7f802a02b47fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
LoadResource
MoveFileA
SetEnvironmentVariableA
SizeofResource
lstrcatA
FindResourceA
lstrcpyA
lstrlenA
CloseHandle
CreateFileA
FlushFileBuffers
WriteFile
ExpandEnvironmentStringsA
ExitProcess
lstrcmpiA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ