acfcd5385e7034974464d1bb43e53976_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acfcd5385e7034974464d1bb43e53976_JaffaCakes118
Size

52KB
MD5

acfcd5385e7034974464d1bb43e53976
SHA1

bd9a0699e46846943ea72167696e1f6befe414e4
SHA256

da198b32395722b0c2836c4867cb7091e848e119d4becbf7de69799abb041e73
SHA512

ae8938f770aa04f452f19006881853c68955a9d288369967cd570dcca1691182ec9ccc97caba6f1735a846363f7c1ea912caaeed64b28437106981b86f040f7a
SSDEEP

1536:DrzA98mO3nbzN7rAg4WkgNSN0fc7Kwc3:sWPnbx7rADUN0v2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acfcd5385e7034974464d1bb43e53976_JaffaCakes118

Files

acfcd5385e7034974464d1bb43e53976_JaffaCakes118
.exe windows:4 windows x86 arch:x86

75943f3632f739df4e3db01b34d4ccee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LCMapStringA
GetOEMCP
MultiByteToWideChar
GetStartupInfoA
lstrcpynW
GetVersion
CreateFileA
WriteFile
SetFilePointer
lstrcpyA
GetCommandLineA
GetCurrentProcess
TerminateProcess
GetACP
GetModuleFileNameA
lstrcpynA
LCMapStringW
GetStdHandle
GetCPInfo
SetHandleCount

user32

GetCursor
CloseWindow
CreateIcon
DrawIcon
EndDialog
IsWindow
GetDC
DrawIconEx
IsMenu

advapi32

RegDeleteValueA
RegQueryValueExW
RegOpenKeyW
RegQueryValueExA
RegEnumValueW
RegSetValueW
RegCreateKeyExA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ