861a019805dcf8d21cc9048fef8082f8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

861a019805dcf8d21cc9048fef8082f8_JaffaCakes118
Size

10KB
MD5

861a019805dcf8d21cc9048fef8082f8
SHA1

39600346ac440c8136b60e4132334d0925294c26
SHA256

82b1846be90256e0cc25a5fefdd63a9754ad53ddff0dee6e0e5c1aef1c6338aa
SHA512

d33b5e428d152eeb9a2798b161c8c6977a12674b3c96c49f47f322ec488b653e6ecc2662aebe898dc28e944847b3754c62e76d88195f65fee52be1a3388f3ed5
SSDEEP

96:V4Zpqfvej4ycgCAFyrng20AsH6yp4h+S2HjFS67:+ZKccghymDIB2x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
861a019805dcf8d21cc9048fef8082f8_JaffaCakes118

Files

861a019805dcf8d21cc9048fef8082f8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7c92f8931849db71e2439a6e66f1aaf5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyboardLayout

shell32

ShellExecuteA

shlwapi

StrStrIA

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
Sleep
lstrcatA
lstrcpyA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

urlmon

CoInternetCompareUrl
IsValidURL

comctl32

GetMUILanguage

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE