a38626969317b36a7cac5566ab625e50_JaffaCakes118 | Triage

Sharing

General

Target

a38626969317b36a7cac5566ab625e50_JaffaCakes118
Size

10KB
MD5

a38626969317b36a7cac5566ab625e50
SHA1

bb88b8c10130dcf9532293915a0569874a365541
SHA256

21babb2a59780979e974e5ca30bcc69a19f24146fb74425b4d17b4fb5e5cca73
SHA512

f9737e95d1e503d2e2ad6efe739cfdf4918dec304497a04d36d884fd94ce7378112fb03cbc3cb67a53f58ae7f60907a534a2ec103fe2094f3b22c0f0ceb75b6e
SSDEEP

192:YEksnQJ//GAPHY68ttW5p11rCdvlfHBNWAIUAO/v:Y1sEZbZDAIUAuv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a38626969317b36a7cac5566ab625e50_JaffaCakes118

Files

a38626969317b36a7cac5566ab625e50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1afb9401b257b4366407bc417f4fdb5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
WideCharToMultiByte
lstrcpyA
lstrcatA
ExitProcess
GetModuleHandleA
GetCommandLineA
CreateEventA
CreateProcessA
WaitForSingleObject
CompareStringA
Process32Next
Process32First
CreateToolhelp32Snapshot
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
CloseHandle
SetFileAttributesW
SetFileAttributesA
GetFileAttributesW
WinExec

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE