da9b5d9b2662f6f9666e7c6e6a240d79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da9b5d9b2662f6f9666e7c6e6a240d79_JaffaCakes118
Size

22KB
MD5

da9b5d9b2662f6f9666e7c6e6a240d79
SHA1

53fe4bf58eacf8eaa54c0001f7220abdab821855
SHA256

a04128fc278d46aa704c579fe54ebc2bf2c7e6e7236a93d3b22e0b8627160690
SHA512

c6bc58e4ab5bddf6acb7e92ee3a7de228279fb272da16bf935cea8eac22b96f8a0791e0556d46fed88180f684b0d83b9f75226655df9ff0ec31c46b1984d7a0d
SSDEEP

384:QTb4ZcgNTDVM9LcVmjJDv+zsYoQGsB7NJVXcKl5xxFU3:3ZcwVK51v6NoTshF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da9b5d9b2662f6f9666e7c6e6a240d79_JaffaCakes118

Files

da9b5d9b2662f6f9666e7c6e6a240d79_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ebc0e4952544fda2469dd1c8c7424ffe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lclose
CopyFileA
CreateMutexA
CreateThread
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCurrentDirectoryA
GetCurrentProcess
GetDriveTypeA
GetFileInformationByHandle
GetFileTime
GetLastError
GetModuleFileNameA
GetProcAddress
GetProcessTimes
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
GlobalMemoryStatus
LoadLibraryA
OpenFile
ReadFile
ReleaseMutex
SetCurrentDirectoryA
SetErrorMode
SetFileAttributesA
SetFilePointer
Sleep
TerminateProcess
WriteFile

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA
ShellExecuteExA

Sections

.rhzki
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE