7612430fcb764d91d73793a7bef80b56_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7612430fcb764d91d73793a7bef80b56_JaffaCakes118
Size

181KB
MD5

7612430fcb764d91d73793a7bef80b56
SHA1

3ad9c40fcce5c8d845f747afd763b1109f641f56
SHA256

74e5ff805e83f59adcbd8ed8e292f94a95bca2b2d31571a1a1e442a1b34614c1
SHA512

b5b0c59155700d111c107fda73d647a000d8b2cd06494b4be3d9199e246bd5c47d5316002203578b1072a5afff9220ad195ae108d5d81174c85ba1c3a7731d81
SSDEEP

3072:k7ZV6mqm5OkTX2vHCfLadAPSshb7ivszR2RMEehUXqGXohlSoey:k7Kw8kTXdfLaeSscvszR2RbehAZXwl1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7612430fcb764d91d73793a7bef80b56_JaffaCakes118

Files

7612430fcb764d91d73793a7bef80b56_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8fcba6eee87d2d01c43d4e7dec0b8261

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
RaiseException
CreateProcessA
LocalAlloc
EnumResourceNamesW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
OpenWaitableTimerW
GetSystemTimeAsFileTime
InterlockedExchange

advapi32

RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA

rpcrt4

NdrFixedArrayFree
UuidCreate

shlwapi

PathFileExistsW

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ