09c973500f168432ef1932dc276697f6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09c973500f168432ef1932dc276697f6_JaffaCakes118
Size

399KB
MD5

09c973500f168432ef1932dc276697f6
SHA1

ee3af8fa7807d226d58861df8b617e5825c85b4e
SHA256

8a7a9f5e2a1f512fde7cad7105844d9c1b000c812b00f43e9afabac20f5a053c
SHA512

82e3d32de37a22b8eba878382a4f1e9fb40c541ba699a6fb9233241a8f9cbd07f1042be1efef619a619b66811e492a8ceacb43beca8ddfa52c10dedcd532ef7b
SSDEEP

6144:9tPxbEX/9TEeijTGSezYddlxqtMLz63SbGqsSbGq:9tVEX/CFTGJzoJqWX2SKS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09c973500f168432ef1932dc276697f6_JaffaCakes118

Files

09c973500f168432ef1932dc276697f6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

adb6341d6f8de5fe90e13c8659e920ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetStartupInfoA
GetModuleHandleW
VirtualAlloc
GetModuleHandleA
GetLastError
GetDriveTypeW
FormatMessageW
DeviceIoControl
CloseHandle
CreateFileA
CreateFileW

user32

RegisterClassExA
LoadIconW
LoadIconA
LoadCursorA

advapi32

RegDeleteValueW
RegCreateKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegOpenKeyExA

Sections

.text
Size: 326KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ