c05a2ff41b19ef168675874e098ecdb0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c05a2ff41b19ef168675874e098ecdb0_JaffaCakes118
Size

5KB
MD5

c05a2ff41b19ef168675874e098ecdb0
SHA1

d3b746329aa0df2aa15edebe7cd96c112b907739
SHA256

833788bb6c24f859cb88ffb455e9fc8d3e50baae237f57533ec94fbfbabda47b
SHA512

062e577b06c20d43686665e6b9eb88f4196cfe11dde54bb8d6a6814d5d1c2b22aa7445c34adeb97903ad0339089d2e522c0729853ec31f58293ab5bcdb93cbbf
SSDEEP

96:llQXG5wY7//6Wb5TkW8eqOlomh5qSjNUN:cXGOYrXAavh5LNUN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c05a2ff41b19ef168675874e098ecdb0_JaffaCakes118

Files

c05a2ff41b19ef168675874e098ecdb0_JaffaCakes118
.dll windows:4 windows x86 arch:x86

c8e11471412e209ae64df0c5559f8ef6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfA

kernel32

ExitThread
GetSystemDirectoryA
SetCurrentDirectoryA
Sleep
CreateThread
_llseek
_lread
_lwrite
lstrcatA
lstrlenA
CreateFileA
CreateEventA
CloseHandle
WaitForSingleObject

advapi32

RegSetValueExA
RegOpenKeyExA
RegNotifyChangeKeyValue
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ