78a9c6b59eaaef4e2d44849b276eb462_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78a9c6b59eaaef4e2d44849b276eb462_JaffaCakes118
Size

10KB
MD5

78a9c6b59eaaef4e2d44849b276eb462
SHA1

a7f5d2779c8b08814e1b999fe6ab0920a8d75167
SHA256

13bbaec5b44c75e6c82e62c4d170c92eb93c1ecc94e72fae9696a8026aaf8725
SHA512

8594058d08342ebd5703207e3e9cb909069c3cc72316b223d8f4ba98d414f5621466287b3baff0cf007c01a16ba1a335d47fb47b8c5b3578fa2d800d32d9a7cf
SSDEEP

96:JlcZZgVx23Ry8j0Z4lilp4hpoiR/7z67:fcZZgEIHIpoi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78a9c6b59eaaef4e2d44849b276eb462_JaffaCakes118

Files

78a9c6b59eaaef4e2d44849b276eb462_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0cfc19c0f6c3301b2e9f6da94ba2898b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime

shell32

ShellExecuteA

shlwapi

StrStrA
StrStrIA

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetVersion
lstrcatA
lstrcpyA
lstrlenA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

comctl32

GetMUILanguage

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE