896457ad1af489a79d96ad5de4f4db50_JaffaCakes118 | Triage

Sharing

General

Target

896457ad1af489a79d96ad5de4f4db50_JaffaCakes118
Size

5KB
MD5

896457ad1af489a79d96ad5de4f4db50
SHA1

cd568d9322d1d7db39dcf158e110e0a6f52c4c79
SHA256

4d7087de81227c7b73218ecbd027bf42030ddb713b2a0b9e47baea0fb362b82d
SHA512

9027e1a24a0350838ad60636e4373a81fcf495dbab8095c433ba636903601667e661a938263e3e360fe4d849589ca54b434b1da850f20acac23e9d84fa2825cc
SSDEEP

96:uZtIxQeY085rw4t7/4Z7We07c/rr8AKO8Noyn:AgEnSt4c/v9KO8Noyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
896457ad1af489a79d96ad5de4f4db50_JaffaCakes118

Files

896457ad1af489a79d96ad5de4f4db50_JaffaCakes118
.exe .vbs windows:4 windows x86 arch:x86 polyglot

07b1860042b8217bb974be5c6659111d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
lstrlenA
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetCurrentDirectoryA
Sleep
CopyFileA
CreateProcessA
WinExec

advapi32

RegDeleteKeyA
RegSetValueA
RegSetValueExA
RegCloseKey
RegCreateKeyA

msvcrt

exit
fclose
fputs
fopen
sprintf
_exit
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE