694a32bf604477b765b40246be9d5091_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

694a32bf604477b765b40246be9d5091_JaffaCakes118
Size

172KB
MD5

694a32bf604477b765b40246be9d5091
SHA1

82d6e70b887bcac936f20965249d78cd60e68013
SHA256

de339da20fd10ce8c4b613d44a4ca4c9ed966920128a5c03cbe2aaf788a190ac
SHA512

7821e95360a51b79b804a743eb3deb481a362ae80455c40c9059f13a1ea9ebb59395d5db32302665b113ec5946059f376304aba3021a4f17bf18e38b52de1342
SSDEEP

3072:MfXLHlhY3pW6kmTtZNH0TKdoevM4GJad1dIUfiA1:MfL6pW6kA6T6vM4kEdIUfiA1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
694a32bf604477b765b40246be9d5091_JaffaCakes118

Files

694a32bf604477b765b40246be9d5091_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6013570f369af7247c0a188990e9d3a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetTickCount
SystemTimeToFileTime
GetLocalTime
CreateFileA
lstrlenA
DeleteFileA
lstrcatA
CloseHandle
MoveFileA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
WriteFile
CreateDirectoryA
lstrcpyA
ExitProcess
MoveFileExA

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyA

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE