726d2ea530cc10434c728750be70aeb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

726d2ea530cc10434c728750be70aeb4_JaffaCakes118
Size

60KB
MD5

726d2ea530cc10434c728750be70aeb4
SHA1

d3dbcdef9c52ae800aaf66057d263cdd12cd627e
SHA256

f5e14a217a80124eac38ce779014eaba3fb0b15382a42b52c9de7c9ee3a68b16
SHA512

c52ec9b5299beb9f3b855991c2fed07d2ed9ca43f12077d2dfcf2b2ee62737b1da79799e31f4cd8f6a434160389f128aa828d80faf489343f16b297c505567c6
SSDEEP

1536:vo2yv1n7cUs7r9AtRtEDl3InKApH59EZeGyOtvnGT:vTydn7cUs7ZAtRtUlQp59Eggvn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
726d2ea530cc10434c728750be70aeb4_JaffaCakes118

Files

726d2ea530cc10434c728750be70aeb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a2beb1f20619de7c13e61c83e8022211

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
MoveFileExA
SetFileTime
VirtualAlloc
GetModuleFileNameA
WriteFile
lstrcatA
lstrlenA
GetFileTime
ExitProcess
CreateFileA
VirtualFree
CloseHandle

advapi32

RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHGetFolderPathA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE