02e226f193d6de2258cd7c1c07330b07_JaffaCakes118 | Triage

Sharing

General

Target

02e226f193d6de2258cd7c1c07330b07_JaffaCakes118
Size

21KB
MD5

02e226f193d6de2258cd7c1c07330b07
SHA1

ee4f3537eefd75f27389da9fc2af6e286d5413ee
SHA256

0dbf071ef17723ff93d8aedeed6f1f92e21b93d9be6a7f1eb1080951ace32589
SHA512

5f0434cdac4cf05ee3cbf2933a209a83c254c91198c5eb9e33b123d9c6d60a74fd3c1c5e97a57bbeabd55b8ca433964e7af4fff8521c42924bcd8c842784e204
SSDEEP

192:WK9i0COq3xRq79TzqiG35sC2m0AVfSUYn6IWpM0ImGYzlRHzR25tX+dL+Y3vgXbY:mOoM5yiQu2xJpbIW3E+dFGY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02e226f193d6de2258cd7c1c07330b07_JaffaCakes118

Files

02e226f193d6de2258cd7c1c07330b07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dde5513a71862ab68c0e4cc03883f533

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetModuleHandleA
ReadFile
SetFilePointer
GetModuleFileNameA
lstrcpyA
lstrcatA
LoadResource
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
CopyFileA
GetCurrentThreadId
Sleep
GetLastError
CreateMutexA
LockResource
SizeofResource
SetFileAttributesA
CreateFileA
WriteFile
CloseHandle
GetTempPathA

user32

GetMessageA

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ