d3e835e8edcd1d2d99f637ffebe513ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3e835e8edcd1d2d99f637ffebe513ed_JaffaCakes118
Size

177KB
MD5

d3e835e8edcd1d2d99f637ffebe513ed
SHA1

894116dc7bda0fa831413d67bb52b7d72a4ec118
SHA256

a18d7ece69de95578002f56a5281f67a72b97f6853698d7c36cd4f6109785ae1
SHA512

fee23f05b056a638d1c5b18c0ddb6194204379d084711360380caefc2630be98d915ff6e3310474744cfb96c0401dabbbccdfd82670c1d9880dc9ef90ebc035c
SSDEEP

3072:abHhVS4cblbhr9hKPajdCG2wSucMAqQVrlzBcfi9rTGyoSmwubF:NZVxsPaJCMJcMH0r7cf+ryKmDbF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3e835e8edcd1d2d99f637ffebe513ed_JaffaCakes118

Files

d3e835e8edcd1d2d99f637ffebe513ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d15506696fb6312c582f6e8c8361607a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegEnumKeyExA
RegSetValueExA

shlwapi

PathFileExistsW

kernel32

FlushInstructionCache
MapViewOfFile
FindResourceExA
FindFirstFileA
EnumResourceNamesW
OpenWaitableTimerW
DuplicateHandle
UnmapViewOfFile
GetModuleFileNameW
FindClose

rpcrt4

NdrFixedArrayFree
UuidCreate

shell32

Shell_NotifyIconA

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ