d5cd64db8f3fec1ba68865c4c4531b15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5cd64db8f3fec1ba68865c4c4531b15_JaffaCakes118
Size

27KB
MD5

d5cd64db8f3fec1ba68865c4c4531b15
SHA1

705de99db54cbae53ca874904d7c862617f0f629
SHA256

4b45014d01541996183e9fb46d00d3fb3c4e62827175cb4a5d73d73791273fe4
SHA512

183ec2dbdacb39fe8a49813e9037bea01d83edb989e8b19e0788c7bac86218d1192a8271b768a80ffdea45f0b62d8d401fb6125ec2d1a9c4a8b42372f6b680a7
SSDEEP

768:9lPbkRTMBU7/Ek/jzjHX8BBO6PNPMQa+Bzy2:PbkRTMAEAf7X8s+Ry2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5cd64db8f3fec1ba68865c4c4531b15_JaffaCakes118

Files

d5cd64db8f3fec1ba68865c4c4531b15_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1754775a7a498cb5eaa92aca8d20b06f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WriteFile
ReadFile
SetEndOfFile
CloseHandle
GetModuleHandleA
SetFileTime
GetTempPathA
GetTempFileNameA
Sleep
GetProcAddress
HeapAlloc
GetSystemDirectoryA
GetProcessHeap

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey

shell32

SHGetSpecialFolderPathA

ole32

CoCreateGuid

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ