c2716e85c9766c3d3e1ba529f51330ea_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2716e85c9766c3d3e1ba529f51330ea_JaffaCakes118
Size

68KB
MD5

c2716e85c9766c3d3e1ba529f51330ea
SHA1

952a6c7d141f19cc3485cba27a4000259c823fef
SHA256

0d61d7877889fd877b647b012d7cd6c09e3f93232c57f8eae708851311ab1b63
SHA512

ee8c969377959bd12c74fef604ec99c1d0a2d341800e4978f7a328c88842c60712e26380d69c78645d5f255601a6d0884bc6eecc2de3c1046705c74068882647
SSDEEP

768:K8EyXFiQOgFpSafqnlZQBISf968C36JpW:K8fIWfKiISf96qpW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2716e85c9766c3d3e1ba529f51330ea_JaffaCakes118

Files

c2716e85c9766c3d3e1ba529f51330ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b16030cebb9f7a2e8ed6d322fb362851

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
WriteFile
CreateFileA
GetModuleFileNameA
SetFileTime
CloseHandle
MoveFileExA
GetVersionExA
GetModuleHandleW
LoadLibraryA
GetSystemDirectoryA
SystemTimeToFileTime
GetModuleHandleA
GetStartupInfoA

advapi32

RegQueryValueExA
RegOpenKeyA

shell32

DoEnvironmentSubstA

shlwapi

PathFileExistsA

msvcrt

_acmdln
_controlfp
sprintf
strcpy
fclose
fopen
strcat
strlen
_exit
_XcptFilter
exit
memset
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ