de5b3ddef1701887ab64adbd0e42255b_JaffaCakes118 | Triage

Sharing

General

Target

de5b3ddef1701887ab64adbd0e42255b_JaffaCakes118
Size

92KB
MD5

de5b3ddef1701887ab64adbd0e42255b
SHA1

0de03a67a1299fb80c844a048104e1693645c02d
SHA256

e4043862f87d78f93f5ad82149e05f04257b840f8510bece91a22aff6c9e6e3b
SHA512

130a30081196eb02f620aa7e0fc024ba81b6c13d964a0fdd95fc73602006df2016b3a38c6f6f8d94b506f5e28d720271db8aff595036b0b533b0339204537a0e
SSDEEP

1536:XhLYTj7wLK9tKNjfG9OUwzqNKkJyyc+WBSaoYAHdRpMfX2Ru0IgaNMYvQ0Dy:XhLYTYLK9tEbHUnsY5WQ2ATK0IvZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de5b3ddef1701887ab64adbd0e42255b_JaffaCakes118

Files

de5b3ddef1701887ab64adbd0e42255b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b74bac56f683c2a19a83b03ea29b166f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp60

??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ

ntdll

strlen
memset
_snprintf

kernel32

lstrcpyA
GetModuleFileNameA
ExitProcess
GetSystemDirectoryA
GetEnvironmentVariableA
CloseHandle
WriteFile
CreateFileA
SetFileAttributesA
CreateProcessA
lstrcatA
GetShortPathNameA
Sleep

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

msvcrt

__dllonexit
_onexit

Sections

.data
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yiomtxx
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE