f5afdbeaf5ac8108194986311ed4454f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5afdbeaf5ac8108194986311ed4454f_JaffaCakes118
Size

16KB
MD5

f5afdbeaf5ac8108194986311ed4454f
SHA1

cab1aa637639139537fd088f4c0e9b618698e933
SHA256

8da8fd54d98153af17a4e09b4f8720d4de51747f137f26f692952963ae062fc7
SHA512

9cec0d4e272a1ce91af7a2876d5dcb3aa6f70ebe54c2722c2a226ad8f588ef6a2eba6c964f33713f83c416c4f0ccacd25dd405519e548a84436541c5908dd069
SSDEEP

192:n2gO+DS5hkxrcjvg5QW0x8f+bK5ugoW5pV701toYrGaEwhah+/6M8v:ROMxrcjbFx82lgoWBAQIGa8h+/6MO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5afdbeaf5ac8108194986311ed4454f_JaffaCakes118

Files

f5afdbeaf5ac8108194986311ed4454f_JaffaCakes118
.exe windows:1 windows x86 arch:x86

84f98c8780ea46712083e7107b93101b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
FindFirstFileA
ExitProcess
WriteConsoleA
WaitForSingleObject
CopyFileA
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
WriteFile
CloseHandle
GetCommandLineA
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetVersion
Sleep

ole32

CoInitialize
CoCreateInstance

advapi32

RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA

shell32

ShellExecuteA

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE