a81b1090f5b637f8ab70062e362bebd4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a81b1090f5b637f8ab70062e362bebd4_JaffaCakes118
Size

7KB
MD5

a81b1090f5b637f8ab70062e362bebd4
SHA1

4d8eda8f52b6bfba833ad287fa2526567b9f3ac9
SHA256

d691a2069760099919da870e01fd2e6e0bce449b057be72aed698cc1e1fcf45c
SHA512

e49071c9642a64ea713a38a9796b421f3037296821dee876afecc8be1c4fe8e75e1d00c2cf759e1dd73880f443a4b9c656bcd5b028d15c86166acd44c279d05e
SSDEEP

192:IW58lvuB7gCkyhyf2QXk6Cr4L5rNlN5lLF2Z/MNcFT:6JcgwfsOkrNlnlLF2JM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a81b1090f5b637f8ab70062e362bebd4_JaffaCakes118

Files

a81b1090f5b637f8ab70062e362bebd4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

55259ab7b3e0661cf67de9fd17edee19

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CloseHandle
lstrcatA
GetLastError
CopyFileA
DeleteFileA
ExitProcess
HeapReAlloc
lstrcpynA
HeapAlloc
HeapFree
WriteFile
GetProcessHeap
GetVolumeInformationA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
CreateThread
lstrcpyA
GetCommandLineA
GetSystemTimeAsFileTime
lstrlenA
SetFilePointer
GetTickCount
CreateFileA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

shell32

SHGetSpecialFolderPathA
ShellExecuteA

wininet

HttpQueryInfoA
InternetOpenUrlA
InternetQueryDataAvailable
InternetReadFile
DeleteUrlCacheEntry
InternetOpenA
InternetCloseHandle

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ