82f4289e945269556358d79cea018085_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82f4289e945269556358d79cea018085_JaffaCakes118
Size

84KB
MD5

82f4289e945269556358d79cea018085
SHA1

c5eeccbde5f9d0367aa18121368593c5fd72b284
SHA256

31a16bfc24765f3eee530c213995b55d479267db957ff64a2de06b4fa9191222
SHA512

e6b2d75215564e597a332736f358ac69a60e8614ff367d0a53a76633c31d013b5de05eb1400457f379cf6ebecc7820304a1433f530c6e303fc874c28fa6ec692
SSDEEP

1536:4OYVNW6d2fS94HViZX4fDLo2vg83nwTBVPHWGW:4OYVNW+bokZIffon83wTBVeGW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82f4289e945269556358d79cea018085_JaffaCakes118

Files

82f4289e945269556358d79cea018085_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6013570f369af7247c0a188990e9d3a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetTickCount
SystemTimeToFileTime
GetLocalTime
CreateFileA
lstrlenA
DeleteFileA
lstrcatA
CloseHandle
MoveFileA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
WriteFile
CreateDirectoryA
lstrcpyA
ExitProcess
MoveFileExA

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyA

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE