6634772c166b0c9a3ea3a3c9b2e85ec7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6634772c166b0c9a3ea3a3c9b2e85ec7_JaffaCakes118
Size

5KB
MD5

6634772c166b0c9a3ea3a3c9b2e85ec7
SHA1

12dee122555e6ec0fd781c6d2e72dd2d9751783c
SHA256

0f8d0aca8c833783cf7c9284243334b1e82e57dadec3f02035b49f17df5b88ac
SHA512

01249fd2ae3e0785395783f5e7c15775030c39d6980d6820b8e68f366754c07bc75a4a8a931d779bc386f8be0604abc15cbf379cc4ce2e687715cee23045cbc0
SSDEEP

96:DSkT15l4sfxpXGF2ditJO24o/evMOo2W27279WNUoyn:lt44G0d0O2n3BU27wNUoyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6634772c166b0c9a3ea3a3c9b2e85ec7_JaffaCakes118

Files

6634772c166b0c9a3ea3a3c9b2e85ec7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1057f8557c9f87ddba67ab7e3b34dfea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

user32

CharLowerA

advapi32

RegCloseKey
RegOpenKeyA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA

wininet

InternetGetConnectedState

kernel32

LoadLibraryA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
lstrcpyA
GetSystemDirectoryA
lstrlenA
CloseHandle
Process32Next
lstrcmpA
Process32First
CreateToolhelp32Snapshot
SetFileAttributesA
Sleep
WinExec
CopyFileA
DeleteFileA
GetStartupInfoA
lstrcatA

msvcrt

_initterm
__set_app_type
_controlfp
strrchr
exit
_exit
_XcptFilter
_acmdln
__getmainargs
__p__fmode
__setusermatherr
_adjust_fdiv
__p__commode
_except_handler3

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE