001d6c45be95bc7fb1e984ecee8d0f0a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

001d6c45be95bc7fb1e984ecee8d0f0a_JaffaCakes118
Size

39KB
MD5

001d6c45be95bc7fb1e984ecee8d0f0a
SHA1

3429d979296342b063fd67280aa1ca91cc52d4b8
SHA256

aa46121c2f013a6cb19a2e5e7c11a751ae6709d8c863b8129a9fb7b4a1523a2a
SHA512

86078113e4886c463e2be196aec96ceb56efe611c51bfa711e28af6112ea7e5bff8f21519f7211962ef7ea2380ab65033b387393dd955097feb8ae877ca10bea
SSDEEP

768:Ynz2sRAAYgfETAp0CPGu224jvgWZyBoMXXVcKEc:e2s+AYHTAm0P224/y20cKEc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
001d6c45be95bc7fb1e984ecee8d0f0a_JaffaCakes118

Files

001d6c45be95bc7fb1e984ecee8d0f0a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

eb7a444ed01abf3bfb3c36da2bc82783

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
FreeLibrary
GetProcAddress
ExitProcess
GetModuleHandleA
LoadLibraryA
lstrcatA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime

advapi32

RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

msvcrt

??2@YAPAXI@Z

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ