fae33949c24de08f1aac38d602987ca8_JaffaCakes118 | Triage

Sharing

General

Target

fae33949c24de08f1aac38d602987ca8_JaffaCakes118
Size

40KB
MD5

fae33949c24de08f1aac38d602987ca8
SHA1

c08ef5fef7b3cec5474eec20b14b88337cb8a301
SHA256

527caa8fbe33c2f9d6b3d5bcef17c8a3e454dfc0e0e7a34c4234bd6b5b94743b
SHA512

c4fa9895d355075d30ae4115249e12257ef9dd322d28f5969095f94ec94b9c3d68eecc9f579b2fe5e55987aa604455cbde2e268349e84174c7d261a32b9bf6ee
SSDEEP

768:zLjwLr+XOkkrLyguXqNjEGxfqDVz5YJX43//4six9mo/iYwex:lc+qNYOqDVWJIP/RixaYwU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fae33949c24de08f1aac38d602987ca8_JaffaCakes118

Files

fae33949c24de08f1aac38d602987ca8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c008e1f84fece599f4a34ff2dc098b37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
MoveFileExA
SetFileTime
GetSystemDefaultLCID
VirtualFree
WriteFile
lstrcatA
GetProcAddress
GetModuleFileNameA
GetFileTime
ExitProcess
CreateFileA
VirtualAlloc
CloseHandle

advapi32

RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHGetFolderPathA

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE