ae669573583591db9bb300a3131e95d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ae669573583591db9bb300a3131e95d0_JaffaCakes118
Size

256KB
MD5

ae669573583591db9bb300a3131e95d0
SHA1

2b8bc9cad4c0c6156fe6a09f5ef1f5f30fda8a98
SHA256

b47bff3dbee1ef8a602215bfd4db1f34eba997b3608fee93de05b3f6b1140d6f
SHA512

7b0e177a8c071cdfe8714b7867b38b8382f0502293db88b30a72ca05f6bea4169e865fcf1747ed4ed57dfb186e2577274d39d49efa3ba850ddeaa1505a4d9cd8
SSDEEP

6144:jQkXRSML/0sERhikP1k/jYW02yPabsZbXuIPEzYzRgpTYklx6hR:tSMD0jhikP12f0JgCeIcNbA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae669573583591db9bb300a3131e95d0_JaffaCakes118

Files

ae669573583591db9bb300a3131e95d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

219fd51129b2e6ba447194a3ab7448f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharNextA

oleaut32

SysFreeString

advapi32

RegSetValueExA

ole32

OleInitialize

pstorec

PStoreCreateInstance

rasapi32

RasGetEntryDialParamsA

shell32

SHGetSpecialFolderPathA

crypt32

CryptUnprotectData

Sections

CODE
Size: 248KB - Virtual size: 332KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE