76941c721f661768f3d733a2e6e5d792_JaffaCakes118 | Triage

Sharing

General

Target

76941c721f661768f3d733a2e6e5d792_JaffaCakes118
Size

40KB
MD5

76941c721f661768f3d733a2e6e5d792
SHA1

10af74181bdbdc5af1e20ae95cf69aac910e9494
SHA256

e98165282e05195c77913fc5e010580c8e49e170b7c4afd764ee5b45864f9fe6
SHA512

a335828123cf001c036b981add4ba780cf168419b91f2ca44578f814867fccf4456282ea741d4f6f99f4ea20d34b181b034576dbb7a794beea05aefe36445469
SSDEEP

768:b2EZ4kjBsDCAAEsEDXy8b/eRNNwdQ5bxU:b2EZpQ/sEDXb/e7NwdWd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76941c721f661768f3d733a2e6e5d792_JaffaCakes118

Files

76941c721f661768f3d733a2e6e5d792_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c008e1f84fece599f4a34ff2dc098b37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
MoveFileExA
SetFileTime
GetSystemDefaultLCID
VirtualFree
WriteFile
lstrcatA
GetProcAddress
GetModuleFileNameA
GetFileTime
ExitProcess
CreateFileA
VirtualAlloc
CloseHandle

advapi32

RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHGetFolderPathA

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE