ce4d3d347c724a21821968fa4a5ac1ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce4d3d347c724a21821968fa4a5ac1ed_JaffaCakes118
Size

172KB
MD5

ce4d3d347c724a21821968fa4a5ac1ed
SHA1

1dea7da922f0c6ccae01ea7132ce053973975afe
SHA256

e4fcae142deb7cf7e470e182f96847fe25693f31a4b2d9caace319cbcba6ec81
SHA512

1eef90caa27fa0f7e59a1d5e738447659ad185cdc5d1176c3c49841f4b7b9da2c40e7bdc46d479030348e36528213d069e4166e2e88916e1c4c88779b949fd45
SSDEEP

3072:QxLESnC8YFSR8FiAU5c87fJI8Dx7KTslbmdGrOAnB1H:Qx4SlYFSROPU5c87RI8Dx1lbhOeDH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce4d3d347c724a21821968fa4a5ac1ed_JaffaCakes118

Files

ce4d3d347c724a21821968fa4a5ac1ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6013570f369af7247c0a188990e9d3a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetTickCount
SystemTimeToFileTime
GetLocalTime
CreateFileA
lstrlenA
DeleteFileA
lstrcatA
CloseHandle
MoveFileA
GetModuleFileNameA
GetModuleHandleA
GetSystemDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
WriteFile
CreateDirectoryA
lstrcpyA
ExitProcess
MoveFileExA

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyA

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE