70f14cce4b96d6272678b12eff50d8c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70f14cce4b96d6272678b12eff50d8c7_JaffaCakes118
Size

5KB
MD5

70f14cce4b96d6272678b12eff50d8c7
SHA1

bfaa8d479421459cafce7e855d39ef556165ca45
SHA256

e76e637340965bd6a8d5242ec0cc033edba908a93e926e15641ea896cd07ffd4
SHA512

a0a30009598affa904068e405069deead6e85c9403d6bc9b3ea68b0d81239a7014748b6ff2f4fa3e25c5d30942dfb9890145f377bf8a9762e0c6cdefe6bf9928
SSDEEP

96:jQaG9Gt2vKhNTVqGP3M3BWycrgIP6xmi:j84eM5PGBtVIPMmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70f14cce4b96d6272678b12eff50d8c7_JaffaCakes118

Files

70f14cce4b96d6272678b12eff50d8c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3453edc645936c1be101f70188d15b42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrcpyA
WideCharToMultiByte
CreateEventA
CreateToolhelp32Snapshot
Process32First
CompareStringA
WaitForSingleObject
CloseHandle
GetModuleFileNameW
GetFileAttributesA
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetModuleHandleA
SetEvent
CreateThread
GetProcAddress
ExitThread

user32

GetForegroundWindow
BeginPaint
DestroyWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE