b733258b7888bfbdb2af4b4f463f522e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b733258b7888bfbdb2af4b4f463f522e_JaffaCakes118
Size

8KB
MD5

b733258b7888bfbdb2af4b4f463f522e
SHA1

e4979a87c5cb3777eb8e06d6c871783e94e89e59
SHA256

0fd19a661526c2227cfb00ca89ddf493628006342a824e6922fabd8f0bbd9e45
SHA512

add1056ec946b46bd70d83715f0e246f5a5f7d8804c956dcc6538abb38003a963cb851e1b7bde1b50eb5fdfb1f358ad9928526858784d1e3dcdb3107416ea37e
SSDEEP

96:bt7EA4xLY3EXUU/7dUwYkOnh7D3ZKgbEUdPmuQVoN:mA4xLqkUvkqAgIUdOuioN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b733258b7888bfbdb2af4b4f463f522e_JaffaCakes118

Files

b733258b7888bfbdb2af4b4f463f522e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6178e05bee188565bc61e5b91fd89477

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetProcAddress
GetModuleHandleA
WriteProcessMemory
VirtualProtectEx
VirtualQueryEx
VirtualAllocEx
VirtualFreeEx
OpenProcess
WaitForSingleObject
CreateRemoteThread
lstrlenW
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
LoadLibraryA
CreateProcessA
ExitProcess
CreateThread
GetVersionExA
MoveFileExA
DeleteFileA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
GlobalFree
CloseHandle
CopyFileA
GetCommandLineA

user32

wsprintfW

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey

urlmon

URLDownloadToCacheFileA

winmm

timeGetTime

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE