633f396e109ace0fb1f5414368914928_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

633f396e109ace0fb1f5414368914928_JaffaCakes118
Size

11KB
MD5

633f396e109ace0fb1f5414368914928
SHA1

ac1ef05f0e2246710e46f2517e8c7bf9771c7268
SHA256

918ec9a53b2fb5b0c51b6bf09ec8aa7ad563806d61af62d5f1821ddbd7efa8ba
SHA512

ba388de1de70c9aa47f4033261f4ea32995a1f60cd1322b6f8c1084dcc5a3124ba2a45c7285580d52f244dec76f7c0c611dae6b52caae74108b33358a63be23a
SSDEEP

96:JCLW4PJMYMFUFtb+aM0bfwN7/pLo2ciw3Tx8lEvwXu27:sLDP6bFUFt103Lo20tMo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
633f396e109ace0fb1f5414368914928_JaffaCakes118

Files

633f396e109ace0fb1f5414368914928_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7ad4ae96d53282f0218b9935ed5f7f16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayout

shell32

ShellExecuteA

shlwapi

StrStrIA

kernel32

lstrlenA
CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetProcAddress
lstrcpyA
lstrcatA
LoadLibraryA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

urlmon

IsValidURL
CoInternetCompareUrl

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE