cdd8c8fa4032f8df8bec23b3fb793582_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cdd8c8fa4032f8df8bec23b3fb793582_JaffaCakes118
Size

181KB
MD5

cdd8c8fa4032f8df8bec23b3fb793582
SHA1

d41d97214e9fd14efe8a08ce479f53387a0b2d68
SHA256

3174ca09d59075204cd96045a1bfe94c875b2c5d939e921ff2f4d163cd905136
SHA512

e62691e24ef6aa490477c8025aba798d023d99f5d407159c8b3d6949bebda83d465f5d356a42485b477fbe7de41599f43f429b718ab92df4d6f5dec1e192cbe2
SSDEEP

3072:cqnUfJNRq5xhe250+jhMlXIWbauAbbK27QfMPbVCB97NU6B4:cqUsxht0+V24Wb8bz78LJU6B4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cdd8c8fa4032f8df8bec23b3fb793582_JaffaCakes118

Files

cdd8c8fa4032f8df8bec23b3fb793582_JaffaCakes118
.exe windows:4 windows x86 arch:x86

020140007e606b71925623338e91d9cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconA

kernel32

FlushInstructionCache
DuplicateHandle
GetModuleFileNameW
FindFirstFileA
EnumResourceNamesW
SetEnvironmentVariableW
UnmapViewOfFile
MapViewOfFile
FindResourceExA
FindClose

winmm

timeEndPeriod

rpcrt4

NdrFixedArrayFree
UuidCreate

advapi32

RegOpenKeyExA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegSetValueExA

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ