a9db6c03c9ddf1ca0308c40781c11f43_JaffaCakes118 | Triage

Sharing

General

Target

a9db6c03c9ddf1ca0308c40781c11f43_JaffaCakes118
Size

24KB
MD5

a9db6c03c9ddf1ca0308c40781c11f43
SHA1

68cf505a3e033a3b863fe52b16fea2cf6347aa16
SHA256

bf0b459c3c9d8a26636157fb8b9c693df0b75f7ded288ebafe8d6374853176fa
SHA512

86562dd907d42da3c422ab7230f298bab68fe35669e828782b97e66a2d23a07fc41906fdf4d780443c5f5803067f6dae4a21ed6081cb67234b022e47dcabb2bd
SSDEEP

192:teOtaGSJAeBqaVKwlf3e4gbZdH0dHRdHwdHPH1SdHB18GZCju11K7kvBPOnT3Uvb:MMGPVx3ehVqrmuJk2VvBR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9db6c03c9ddf1ca0308c40781c11f43_JaffaCakes118

Files

a9db6c03c9ddf1ca0308c40781c11f43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82ed699d4cad81fb8bdc7c975915ad7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateMutexA
GetLastError
ExitProcess
CreateFileA
GetFileSize
GlobalAlloc
ReadFile
CloseHandle
GlobalFree
WriteFile
WinExec
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
OpenFile
FindFirstFileA
FindClose
FlushFileBuffers

advapi32

RegCreateKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA

shell32

ShellExecuteA
SHGetSpecialFolderPathA

urlmon

URLDownloadToFileA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE