8c01880e00449f251c9c0c8aeded1910_JaffaCakes118 | Triage

Sharing

General

Target

8c01880e00449f251c9c0c8aeded1910_JaffaCakes118
Size

57KB
MD5

8c01880e00449f251c9c0c8aeded1910
SHA1

af1f0688f6aa84fbf3561bde0a0f93bb13f850a7
SHA256

bcfa60ea21b3f1d94c630aaa6de94e6b01b995cf9886fd7adb30cce110e4bb9e
SHA512

ed1789906a38855877e1ba33cd6303486d94d22c22e4863416b55e2b7970062a87839d4572fd80611e0ac2de7b5dd299a9f6e84ce9cecb092689798560313fa5
SSDEEP

768:x3lrPxlT3w0XtqmI086s16Rr2Y/i6J0AS1ndnUg/kpOnpkRHyPO/tNce8SpA7:7PT3wcxlq6Rr28TxuVUzpekkGce8Sg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c01880e00449f251c9c0c8aeded1910_JaffaCakes118

Files

8c01880e00449f251c9c0c8aeded1910_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed40cb110885278c000215d59af22e43

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHGetValueA

kernel32

ResumeThread
DeleteFileA
HeapAlloc
GetProcessHeap
ReadFile
LocalFree
LocalAlloc
MultiByteToWideChar
CopyFileA
GetModuleFileNameA
GetShortPathNameA
ExitProcess
GetExitCodeProcess
WaitForSingleObject
GetTempPathA
VirtualAlloc
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
SetFilePointer

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ