a25a2dd15b167779d1e6a5bda731670c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a25a2dd15b167779d1e6a5bda731670c_JaffaCakes118
Size

5KB
MD5

a25a2dd15b167779d1e6a5bda731670c
SHA1

a88ccf9b0f27a17b5958aab7190e999dd60ebc79
SHA256

e8631b4b99a1a0417c9cf4c11cd98aadb97e2f9e1ad7b4bdd57d512c0d3aea45
SHA512

1d98272eb03a249d6e5629f7a2e4b9c154f4fd2f6f61d0078175a36efa5413b0380a81b20a86a6e07d831c7ab2ddf5251b9442e7323e3df1e6662ee8aab5a7bf
SSDEEP

96:iJrMo8UmF277h5PgPlM3B/OpL0OOdIp6xmi:iWo8Cg9GB/aL0OAIpMmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a25a2dd15b167779d1e6a5bda731670c_JaffaCakes118

Files

a25a2dd15b167779d1e6a5bda731670c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

22de8239a5d0b072f8f667b890a28b30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
lstrcatA
lstrcpyA
WideCharToMultiByte
WaitForSingleObject
CreateToolhelp32Snapshot
Process32First
CompareStringA
CloseHandle
SetFileAttributesA
GetModuleFileNameW
FreeLibrary
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetModuleHandleA
SetEvent
CreateThread
GetProcAddress
ExitThread

user32

ShowWindow
BeginPaint
DestroyWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE