088628a3ea6102f269c1284d0d9e89ec_JaffaCakes118 | Triage

Sharing

General

Target

088628a3ea6102f269c1284d0d9e89ec_JaffaCakes118
Size

805KB
MD5

088628a3ea6102f269c1284d0d9e89ec
SHA1

cdecd196a1ea1d81f19d88c4a44770a7ceff47ed
SHA256

a652750bc3d9ee2879ede8df42a27df8a6e84f4b1501c62c74b4d8041b984230
SHA512

53bb5dd21cdf33293bbf85f2190605c2f724db28e078d0893618a7242700efb6285ec0b15a819981e2c461429f84c14ebd448c4f450570df4bc1eb8a9033ff11
SSDEEP

24576:UmeCiN4LGuA2YXim6AWC6BEQb4HaIQ1TZBft:By4LGuA2YwAW1qQb9/3F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
088628a3ea6102f269c1284d0d9e89ec_JaffaCakes118

Files

088628a3ea6102f269c1284d0d9e89ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

14b2a1e1ee054b100b047e8e6689e930

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
GetEnvironmentVariableA
MapViewOfFileEx
CreateFileMappingA
GetFileSize
GetLastError
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

Sections

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ