a2c088bad915ea8b0d450375f62031b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2c088bad915ea8b0d450375f62031b0_JaffaCakes118
Size

3KB
MD5

a2c088bad915ea8b0d450375f62031b0
SHA1

56d07c16186be7da4a76c1efebb83152ea50ff8f
SHA256

939ca1a857f5d348decc74b4948c2246a04c6d75384e72afaf0442d8b65a7243
SHA512

ddd051d284ab41e1b5c8b10d030fc8d4314beb6be59d3682ce2e38f22052bac277bb3aaa7d33171f6034236bd547db41f42415b8a5c18f0aa6ea2debc3aef312

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2c088bad915ea8b0d450375f62031b0_JaffaCakes118

Files

a2c088bad915ea8b0d450375f62031b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ba0005f94fd650bbf6bc592fca2f3359

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetTickCount
GetTempPathA
GetPrivateProfileStringA
LoadLibraryA
GetModuleFileNameA
GetSystemDirectoryA
WinExec
DeleteFileA
GetProcAddress

user32

wsprintfA

advapi32

RegSetValueExA
RegCreateKeyA
RegCloseKey

msvcrt

strlen
memcpy
memset
malloc
strchr
_itoa
strcpy
sprintf
strcat
atoi

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE