01317afff33fc387da55b5a39b51fa2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01317afff33fc387da55b5a39b51fa2f_JaffaCakes118
Size

37KB
MD5

01317afff33fc387da55b5a39b51fa2f
SHA1

ad951e3bd75c4c467ba64e9354325b38a83443e5
SHA256

743f0e30f28bd830bbffe30e6ce0d4225d62cea8e1a0d802f3afd0c53d4f4a60
SHA512

6225caab7b76f3ec1433e8b5beb9d959c3a49241f0ea1d571122df65151c78f4d5ff4986fce1af742115a88c5bf65a9c3b02deb16e46e5e50fc28b0051295ab0
SSDEEP

768:iUVAjD5q3g3FzpjIcHZN4zXQz+SDQcptSNh/korFSRmmYueOu7KnN:iUKnA3apjIERDSKnN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01317afff33fc387da55b5a39b51fa2f_JaffaCakes118

Files

01317afff33fc387da55b5a39b51fa2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e484ffc36df51103ede65de79f5e6d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
SystemTimeToFileTime
ExitProcess
GetModuleHandleA
LocalFileTimeToFileTime
FreeLibrary
SetFileTime

advapi32

RegQueryValueExA

shell32

ShellExecuteA

msvcrt

??2@YAPAXI@Z

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ