6979225dc19d5156ce3f796ac962ae39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6979225dc19d5156ce3f796ac962ae39_JaffaCakes118
Size

37KB
MD5

6979225dc19d5156ce3f796ac962ae39
SHA1

109c1e051c9a31164a09b2d80ae4b27786e58374
SHA256

1822df1c0483154363f21dc60fc990192266e3bf6ad7bfda8e645d6bb61cf0e7
SHA512

4eeb43bd2658caab316468dde4c84e82743d2b33c6748c0c641a908e9aef3efc6d20260356aadd7a971931f310ec05db4542628f4ae4b6d69ff1f3bc3ff2d678
SSDEEP

768:/uvru1v05z686A/N48IwbQ2g3fy1FsEDjXt:/4ru1MdjUEOfkljd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6979225dc19d5156ce3f796ac962ae39_JaffaCakes118

Files

6979225dc19d5156ce3f796ac962ae39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

824a0b44387b3463c5ab81b3ddea38ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetProcAddress
GetSystemDefaultLCID
LoadLibraryA
GetFileTime
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
lstrcatA
ExitProcess
CreateFileA
CreateDirectoryA
MoveFileExA
CloseHandle

advapi32

RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHGetFolderPathA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE