72e3960717f3b4f30a99b1a35bed738f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72e3960717f3b4f30a99b1a35bed738f_JaffaCakes118
Size

11KB
MD5

72e3960717f3b4f30a99b1a35bed738f
SHA1

73965b55089a3cc6010d486b583a92630eef8b0f
SHA256

99da664f6a5d6b78a2359f070946767db46efc8226b37f569e42d7bd29887eab
SHA512

dc34f5b6be4f9700132ef1dad0697c92718d64bf6f0475b001222df888e020fe445d19d15076bed30c551fb187afd92eb05ad57071a0f3cb696bf46fab3a3528
SSDEEP

96:Jzk3FHN+P1IBk74b8+jaGBj5jR12X6eDvdpcw2bl8S7F9g27:S3FHk7yGGF5jwrcw2b5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72e3960717f3b4f30a99b1a35bed738f_JaffaCakes118

Files

72e3960717f3b4f30a99b1a35bed738f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47325a264ee5f0e4b7ce224d7ffdc4c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayout

shell32

ShellExecuteA

shlwapi

StrStrIA

kernel32

lstrcpyA
CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetProcAddress
lstrcatA
GetVersion
LoadLibraryA
GetTickCount

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

urlmon

CoInternetCompareUrl

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE