691590edd83f6067f5bda3f2d3e63e2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

691590edd83f6067f5bda3f2d3e63e2d_JaffaCakes118
Size

5KB
MD5

691590edd83f6067f5bda3f2d3e63e2d
SHA1

ed355f092373d55d26dd6a9ac11f4f419e9590f6
SHA256

50a6f27aed02cf64eccde2fa855c607a301b5712fb9124ba5491cbec97ce74b0
SHA512

d2721aaac98258727de4fe503ab0bb51f18a58a7018b10de199fa39349e660443f99b1e0f01d2a57b4fab8b3fc62bd777ad74794261f20001b3a5bf18b572975
SSDEEP

96:VdjmQULhRagxHqziOMAYeHvu5ltEAeGqAmE:vm/BxKziOMDePu5ltveVAmE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
691590edd83f6067f5bda3f2d3e63e2d_JaffaCakes118

Files

691590edd83f6067f5bda3f2d3e63e2d_JaffaCakes118
.exe windows:1 windows x86 arch:x86

58e1502e6dddc38a98485f88154c8331

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetFileSize
GetLastError
GetModuleFileNameA
GetSystemDirectoryA
CloseHandle
GetTickCount
CopyFileA
Process32First
Process32Next
ReadFile
RtlUnwind
CreateFileA
SetFileAttributesA
SetFilePointer
Sleep
WriteFile
CreateMutexA
CreateProcessA
CreateThread
CreateToolhelp32Snapshot

advapi32

RegCreateKeyA
RegCloseKey
RegSetValueExA

crtdll

__GetMainArgs
exit
malloc
memset
raise
signal
strcat
strcmp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 252B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE