a1292d033b65a0968cad2acaff9fa2de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1292d033b65a0968cad2acaff9fa2de_JaffaCakes118
Size

35KB
MD5

a1292d033b65a0968cad2acaff9fa2de
SHA1

5d0ab06885114048d5013f24bd90312563a7479a
SHA256

335f08339eb608358806a84173ed969f759c725c352a8198fd6093f58ab53420
SHA512

c72bc846919fef8d364d49e27f9ffe0d7e9085e2c8feb87008ae5e66dbf1f2c65a65c3ea270f086e3e9cc268e88c22edb8a81b534ea30134be1cf8c0a5924a84
SSDEEP

768:q1yGtXPdIIu7o01BBgJNRMbyiwj0zmXiaWy0XF0nzVXlhW/fcIfE6rI:WyKX1W0KBBgJHMyiwj0zm0FXF0nzVV6D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1292d033b65a0968cad2acaff9fa2de_JaffaCakes118

Files

a1292d033b65a0968cad2acaff9fa2de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f1b5c47a34270902ca812d790f60516

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCurrentProcessId
GlobalUnfix
MultiByteToWideChar
ReadFile
SetVolumeLabelW
TerminateThread
lstrcatA

advapi32

CryptDestroyKey
CryptSetProviderW
EnumServicesStatusA
RegOpenKeyA
StartServiceCtrlDispatcherA

shell32

DllInstall
DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteExW
SHGetFileInfoW
SHGetPathFromIDListW

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE