bf9b2b03a9392283edac8e5b0d12d6c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf9b2b03a9392283edac8e5b0d12d6c2_JaffaCakes118
Size

6KB
MD5

bf9b2b03a9392283edac8e5b0d12d6c2
SHA1

04dd345b9a675944d4801541ac8b9e6d64c5eba0
SHA256

f6bc2a19a5e64b96c994d650ed3c2a04fade51ffafd86fd40b1b9cd1bec54d6e
SHA512

e0e99bf4a0f2312fb8a2fb5030efbef1b36bf07a65bf839733afd4565492ce3670bb46829da9a2c66c0c7ceeda83616ce67356066b717177cade0d72e247bfa0
SSDEEP

96:eUDrHEp8uM5lRJzH+F6KgfHJz0D7Y6Rim4wi1ZMutvicW:eSrHMm3qwm4wZutvicW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf9b2b03a9392283edac8e5b0d12d6c2_JaffaCakes118

Files

bf9b2b03a9392283edac8e5b0d12d6c2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

cdf7577017c749bcd4286937db128bef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

StrRChrA
SHDeleteKeyA
SHCopyKeyA
StrChrA

kernel32

GlobalFree
lstrcpyA
lstrlenA
lstrcatA
CloseHandle
GlobalAlloc
TerminateProcess
OpenProcess
lstrcmpiA
GetProcAddress
GetSystemTimeAsFileTime
DeleteFileA
CreateFileA
GetTempPathA
lstrcpynA
OpenFileMappingA
GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey
RegEnumValueA
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA

shell32

FindExecutableA

Exports

Exports

DetectBrowser
DetectOldVersion
GetRandomNumber
IsGreatDealExec
KillGreatDeal
RenameKey
StrLwr

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ