af20022a6bccda63f5f6735a788b9867_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af20022a6bccda63f5f6735a788b9867_JaffaCakes118
Size

27KB
MD5

af20022a6bccda63f5f6735a788b9867
SHA1

ccbaeeba922c78c41622162fa10d3b05027765c6
SHA256

c021ab7eb058074dcaff2b6460d3518459d7c415c7c1ee0d05b4579ad7ee4747
SHA512

82b0c19699651f9943fdd6d4ec5a05071e1f64adb3d7bb9890b65bf20bf5c2fb815b68bbe34589ad97d84a8f773b9adc57e2856d5d0f27106b9e4ceb706d56cd
SSDEEP

384:bWvA0o+xGUMo69hYDojW/0XohjVyODRzG691kyu+W:6vA01xGUF8BoNVyODpGvrx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af20022a6bccda63f5f6735a788b9867_JaffaCakes118

Files

af20022a6bccda63f5f6735a788b9867_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b88c07e7df145975a2956d6fcac57d8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
TerminateProcess
Process32Next
WriteFile
Process32First
CreateToolhelp32Snapshot
DeleteFileA
Sleep
CopyFileA
GetTempPathA
CreateThread
GetSystemDirectoryA
CloseHandle
OpenProcess
WinExec

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 698B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ