75a1149d1e49e8f0fed077f86dcc8c97_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75a1149d1e49e8f0fed077f86dcc8c97_JaffaCakes118
Size

24KB
MD5

75a1149d1e49e8f0fed077f86dcc8c97
SHA1

3c958210b8cea62331bdd6f10e462e7f53b61f99
SHA256

5a408ebdc799fcfe01b848312320309858088cb91ade37ef0d7d458436809da2
SHA512

181f504fd36b2fdaf3a33cd95c2d6f871f21bdacc734e898b40f0238d7bc6f0fcb604db31db2073da6ae17da05e853a8e23063a2863928f3767f28dfed9df265
SSDEEP

384:NVNUHiHWS50Tmge2b0iU9sa5z3Y74HiAxQ:/NUHaF5bgem0iusaB3akQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75a1149d1e49e8f0fed077f86dcc8c97_JaffaCakes118

Files

75a1149d1e49e8f0fed077f86dcc8c97_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebb65c9ffa1031b0826eb8543877eed6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
GetFileSize
CreateFileW
CreateDirectoryW
GetSystemDirectoryW
FindClose
FindNextFileW
FindFirstFileW
ReadFile
FreeResource
GetProcAddress
LoadLibraryW
FindResourceW
GetModuleHandleW
FreeLibrary
WriteFile
Sleep
CloseHandle
SizeofResource
GetModuleFileNameW
GetStartupInfoW

advapi32

RegSetValueExW
RegCloseKey

msvcrt

wcsstr
wcscat
wcslen
??3@YAXPAX@Z
wcsncmp
wcsncat
wcsncpy
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
wcscpy

Sections

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ