8c88f44ded74f29c4389b0550eb9c300_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c88f44ded74f29c4389b0550eb9c300_JaffaCakes118
Size

674KB
MD5

8c88f44ded74f29c4389b0550eb9c300
SHA1

cd359d5e7cfd87a6ea3226c7c87cf85084ac35ba
SHA256

e132ebdedcd2c656622d0d05f4b6c0fe472084d2596bfdb0f5c7777f352f54e3
SHA512

e05c95b06a0b223750259cf3fc98053b83ebb81fa33e53741f5081fcb61cd0039835a6f49ad5edc260f1d5daf43d2c4e959e9d7dfcc2f4273f2e66b3c7a681bb
SSDEEP

12288:vPkdQzy3/JEjjBUYdTjFWOzCW1Fad2vFBHGwh+AxsAvOqEuu4:vPkddBejfdTFzqd2v6JAx54uu4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c88f44ded74f29c4389b0550eb9c300_JaffaCakes118

Files

8c88f44ded74f29c4389b0550eb9c300_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a4f4c45e15e0c469158548704bbc0adf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey

kernel32

GetCommandLineA
GetProcAddress
lstrlenA
ExitProcess
GetModuleHandleA

user32

GetDesktopWindow
ShowWindow

comctl32

InitCommonControlsEx
InitCommonControls

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ