864b1db7be98b570c46e2112c396d5cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

864b1db7be98b570c46e2112c396d5cc_JaffaCakes118
Size

729KB
MD5

864b1db7be98b570c46e2112c396d5cc
SHA1

cb075da9355f81fb87f8eba7e84313032705d01c
SHA256

e18c2497e2966646d5ab93854ac9c7f0479adcd3f981cd9a96fbf0c39f4cd527
SHA512

a4af1662513a0581224456174efc87fafd64c06f898e3a24b285354fae7ab1b9f8a2c224a5f1acc6d11b210f76e367192a10079cc866983e8d654e92da9e437f
SSDEEP

12288:QzxveAzCm9i4PBTREAvYn1ZNPi6k7TIKqzg/zWrwYDd3x4VcpMOaf7Gh:YmeCm9i4PBWAvYnLNiB78RzYgh3x4AHT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
864b1db7be98b570c46e2112c396d5cc_JaffaCakes118

Files

864b1db7be98b570c46e2112c396d5cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14b2a1e1ee054b100b047e8e6689e930

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
GetEnvironmentVariableA
MapViewOfFileEx
CreateFileMappingA
GetFileSize
GetLastError
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

Sections

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ